The vulnerability of the macOS operating system’s Shortcuts component, which allows a hacker to gain unauthorized access to protected information

The vulnerability of the macOS operating system’s Shortcuts component is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Remote Code Execution (RCE)

Firefox is vulnerable to Remote Code Execution. The vulnerability is due to a lack of validation when creating shortcuts, which could allow an attacker to trick a user into create a shortcut that points to local system files...

CVE-2023-32442

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Ventura 13.5, macOS Monterey 12.6.8. A shortcut may be able to modify sensitive Shortcuts app settings...

CVE-2023-32442

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Ventura 13.5, macOS Monterey 12.6.8. A shortcut may be able to modify sensitive Shortcuts app settings...

PT-2023-4266 · Apple · Shortcuts App +1

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.5 macOS Monterey versions prior to 12.6.8 Description: An access issue was addressed with improved access restrictions. This issue allows a shortcut to modify sensitive Shortcuts app settings, potentially leading to...

Shortcuts to apps not seen in the start menu of the published desktop

Shortcuts are not visible in the published desktop or windows start menu even after the correct policies have been applied Enable Desktop shortcut...

SUSE CVE-2023-37203

Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker to trick end-users into creating a shortcut to local system files. This could have been leveraged to execute arbitrary code. This vulnerability affects Firefox 115...

CVE-2023-37203

Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker to trick end-users into creating a shortcut to local system files. This could have been leveraged to execute arbitrary code. This vulnerability affects Firefox 115...

CVE-2023-37203

Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker to trick end-users into creating a shortcut to local system files. This could have been leveraged to execute arbitrary code. This vulnerability affects Firefox 115...

UBUNTU-CVE-2023-37203

Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker to trick end-users into creating a shortcut to local system files. This could have been leveraged to execute arbitrary code. This vulnerability affects Firefox 115...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from an input validation error vulnerability that stems from insufficient validation of the drag-and-drop API in combination with social engineering, which can be exploited by a...

CVE-2023-21177

In requestAppKeyboardShortcuts of WindowManagerService.java, there is a possible way to infer the app a user is interacting with due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

PT-2023-17965 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a missing permission check in the requestAppKeyboardShortcuts function of WindowManagerService.java. This could allow an attacker to infer the app a user is interacting with,...

CVE-2023-32391

The issue was addressed with improved checks. This issue is fixed in iOS 15.7.6 and iPadOS 15.7.6, watchOS 9.5, iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4. A shortcut may be able to use sensitive data with certain actions without prompting the user...

CVE-2023-27963

The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. A shortcut may be able to use sensitive data with certain actions without prompting the use...

NewStart CGSL CORE 5.05 / MAIN 5.05 : gnome-tweak-tool Vulnerability (NS-SA-2023-0022)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has gnome-tweak-tool packages installed that are affected by a vulnerability: - It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physica...

NewStart CGSL CORE 5.05 / MAIN 5.05 : colord Vulnerability (NS-SA-2023-0023)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has colord packages installed that are affected by a vulnerability: - It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access t...

NewStart CGSL CORE 5.05 / MAIN 5.05 : osinfo-db Vulnerability (NS-SA-2023-0026)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has osinfo-db packages installed that are affected by a vulnerability: - It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical acces...

NewStart CGSL CORE 5.05 / MAIN 5.05 : xchat Multiple Vulnerabilities (NS-SA-2023-0021)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has xchat packages installed that are affected by multiple vulnerabilities: - An error within the parserollei function internal/dcrawcommon.cpp within LibRaw versions prior to 0.19.1 can be exploited to trigger an infinite loop...

[SECURITY] Fedora 38 Update: haruna-0.10.3-3.fc38

Open source video player built with Qt/QML and libmpv. Features: + play online videos, through youtube-dl; + supports youtube playlists; + toggle playlist with mouse-over, playlist overlays the video; + auto skip chapter containing certain words; + configurable shortcuts and mouse buttons; + quic...