Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple for Mac computers. An access control error vulnerability exists in Apple macOS, which can be exploited by an attacker to access sensitive user data...

CVE-2025-43197

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data...

CVE-2025-43233

This issue was addressed with improved access restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. A malicious app acting as a HTTPS proxy could get access to sensitive user data...

CVE-2025-43233

A vulnerability in the HTTPS protocol implementation on macOS systems allows a malicious app acting as a HTTPS proxy to gain unauthorized access to sensitive user data . The root cause is attributed to deficiencies in access control . This issue is fixed in macOS Sequoia 15.6 , macOS Sonoma 14.7....

CVE-2025-43195

A vulnerability exists in the handling of environment variables within macOS , specifically involving insufficient validation of input data in the CoreServices component. This flaw could allow an attacker to gain unauthorized access to protected information or sensitive user data . The issue is a...

CVE-2025-43195

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data...

CVE-2025-43267

An injection issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6. An app may be able to access sensitive user data...

CVE-2025-43267

An injection issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6. An app may be able to access sensitive user data...

CVE-2025-43246

Apple's macOS Sequoia and macOS Sonoma operating systems are affected by a security vulnerability that could allow an application to access sensitive user data . The issue was addressed by implementing improved checks . Remediation is available in macOS Sequoia 15.6 and macOS Sonoma 14.7.7 . Expl...

CVE-2025-43246

This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. An app may be able to access sensitive user data...

CVE-2025-43225

A logging issue in iPadOS and macOS systems could allow an application to access sensitive user data due to insufficient data redaction. This vulnerability affects iPadOS 17.7.9 , macOS Sequoia 15.6 , macOS Sonoma 14.7.7 , and macOS Ventura 13.7.7 . The issue is resolved in these specific version...

CVE-2025-43225

A logging issue was addressed with improved data redaction. This issue is fixed in iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data...

CVE-2025-43225

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Sequoia 15.6, iPadOS 17.7.9, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. An app may be able to access sensitive user data...

PT-2025-31321 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 macOS versions prior to 14.7.7 Description: An application may be able to access sensitive user data due to insufficient checks. This issue was addressed with improved checks. Recommendations: Update to macOS...

CVE-2025-40724

Stored Cross-Site Scripting XSS vulnerability in Pharmacy POS PHP Script. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL using the umedicinename parameter in /editmedicine.php. This vulnerability can be exploited to...

CVE-2025-40724

Vulnerability : CVE-2025-40724 affects the Pharmacy POS PHP Script. A Stored Cross-Site Scripting (XSS) flaw exists in the /edit_medicine.php endpoint, exploitable via the u_medicine_name parameter to inject JavaScript into victims’ browsers. Impact : As described, an attacker can steal sensitive...

CVE-2025-40724 Stored Cross-Site Scripting (XSS) in Pharmacy POS PHP Script

Stored Cross-Site Scripting XSS vulnerability in Pharmacy POS PHP Script. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL using the umedicinename parameter in /editmedicine.php. This vulnerability can be exploited to...

CVE-2025-40724 Stored Cross-Site Scripting (XSS) in Pharmacy POS PHP Script

Stored Cross-Site Scripting XSS vulnerability in Pharmacy POS PHP Script. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL using the umedicinename parameter in /editmedicine.php. This vulnerability can be exploited to...

PT-2025-29543 · Unknown · Pharmacy Pos Php Script

Name of the Vulnerable Software and Affected Versions: Pharmacy POS PHP Script affected versions not specified Description: A stored Cross-Site Scripting XSS issue exists in Pharmacy POS PHP Script. Successful exploitation allows an attacker to execute JavaScript code in a victim’s browser. This ...

CVE-2025-53885 Directus doesn't redact sensitive user data when logging via event hooks

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0 and prior to version 11.9.0, when using Directus Flows to handle CRUD events for users it is possible to log the incoming data to console using the "Log to Console" operation and a template...