Lucene search
+L

314 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/08/10 4:25 p.m.•9 views

Malicious code in jupphelp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dcda51f3ac0b82ef824630ce053d4dc42aa2021baf16e476ca83ef8d7f7c1cab Once run, downloads and install from sleipnirbrowser.org a suspicious executable pretending to be a webbrowser. This website appears to be a scam using some ki...

6.9AI score
SaveExploits0References4
OSV
OSV
•added 2024/08/10 4:25 p.m.•8 views

MAL-2024-12294 Malicious code in juphelper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9bc13ee7427735e24063e780c1b868c131887f9f77c858325e1c81353ee4cd3a Once run, downloads and install from sleipnirbrowser.org a suspicious executable pretending to be a webbrowser. This website appears to be a scam using some ki...

6.8AI score
SaveExploits0References4
NVD
NVD
•added 2024/07/29 11:15 p.m.•23 views

CVE-2024-40800

An input validation issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. An app may be able to modify protected parts of the file system...

8.4CVSS0.0034EPSS
SaveExploits0References13
NVD
NVD
•added 2024/07/29 11:15 p.m.•24 views

CVE-2024-27888

A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Sonoma 14.4. An app may be able to modify protected parts of the file system...

7.1CVSS0.00179EPSS
SaveExploits0References3
CVE
CVE
•added 2024/07/29 10:17 p.m.•86 views

CVE-2024-27882

CVE-2024-27882 describes a permissions issue in macOS where an app may be able to modify protected parts of the file system. The vulnerability is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, and macOS Ventura 13.6.8. The available connected documents confirm the same affected product and pa...

4.4CVSS5.8AI score0.003EPSS
SaveExploits0References12Affected Software1
Vulnrichment
Vulnrichment
•added 2024/07/29 10:16 p.m.•20 views

CVE-2024-27883

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. An app may be able to modify protected parts of the file system...

5.8AI score0.00269EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/07/29 10:16 p.m.•39 views

CVE-2024-40800

An input validation issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. An app may be able to modify protected parts of the file system...

0.0034EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/07/29 10:16 p.m.•28 views

CVE-2024-40800

An input validation issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. An app may be able to modify protected parts of the file system...

5.8AI score0.0034EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/07/29 10:16 p.m.•25 views

CVE-2024-40811

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. An app may be able to modify protected parts of the file system...

5.9AI score0.00217EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/29 10:16 p.m.•73 views

CVE-2024-40811

A security vulnerability in macOS Sonoma prior to version 14.6 allows an application to modify protected parts of the file system . This issue was addressed with improved checks and is resolved in macOS Sonoma 14.6 . No specific exploitation details or direct links are provided in the documents.

5.5CVSS5.9AI score0.00217EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
•added 2024/07/02 3:58 p.m.•25 views

yt-dlp File system modification and RCE through improper file-extension sanitization

Summary yt-dlp does not limit the extensions of downloaded files, which could lead to arbitrary filenames being created in the download folder and path traversal on Windows. Since yt-dlp also reads config from the working directory and on Windows executables will be executed from the yt-dlp...

7.8CVSS7.7AI score0.00325EPSS
SaveExploits0References10Affected Software1
Vulnrichment
Vulnrichment
•added 2024/07/02 1:47 p.m.•25 views

CVE-2024-38519 yt-dlp and youtube-dl vulnerable to file system modification and RCE through improper file-extension sanitization

yt-dlp and youtube-dl are command-line audio/video downloaders. Prior to the fixed versions, yt-dlp and youtube-dl do not limit the extensions of downloaded files, which could lead to arbitrary filenames being created in the download folder and path traversal on Windows. Since yt-dlp and youtube-...

7.8CVSS7.6AI score0.00325EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2024/07/02 1:47 p.m.•61 views

CVE-2024-38519 yt-dlp and youtube-dl vulnerable to file system modification and RCE through improper file-extension sanitization

yt-dlp and youtube-dl are command-line audio/video downloaders. Prior to the fixed versions, yt-dlp and youtube-dl do not limit the extensions of downloaded files, which could lead to arbitrary filenames being created in the download folder and path traversal on Windows. Since yt-dlp and youtube-...

7.8CVSS0.00325EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2024/06/10 8:56 p.m.•25 views

CVE-2024-27885

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An app may be able to modify protected parts of the file system...

7.1AI score0.00268EPSS
SaveExploits0References3
NVD
NVD
•added 2024/03/28 4:15 p.m.•26 views

CVE-2023-42930

This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Monterey 12.7.2. An app may be able to modify protected parts of the file system...

5.5CVSS5.2AI score0.00197EPSS
SaveExploits0References6
NVD
NVD
•added 2024/03/28 4:15 p.m.•20 views

CVE-2023-42896

An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, macOS Sonoma 14.2. An app may be able to modify protected parts of the file system...

5.5CVSS4.9AI score0.00203EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2024/03/28 3:39 p.m.•34 views

CVE-2023-42896

An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, macOS Sonoma 14.2. An app may be able to modify protected parts of the file system...

5.6AI score0.00203EPSS
SaveExploits0References5
CVE
CVE
•added 2024/03/28 3:39 p.m.•94 views

CVE-2023-42896

CVE-2023-42896 affects Apple platforms (macOS and iOS/iPadOS). The issue is in the handling of temporary files, allowing an app to modify protected parts of the file system. It is fixed by macOS Monterey 12.7.2, macOS Ventura 13.6.3, macOS Sonoma 14.2, and iOS/iPadOS 16.7.3 and 17.2. Exploitation...

5.5CVSS7AI score0.00203EPSS
SaveExploits0References9Affected Software3
NVD
NVD
•added 2024/03/08 2:15 a.m.•15 views

CVE-2024-23269

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to modify protected parts of the file system...

6.2CVSS6.8AI score0.00247EPSS
SaveExploits0References12
Prion
Prion
•added 2024/03/08 2:15 a.m.•15 views

Design/Logic Flaw

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, macOS Ventura 13.6.5. An app may be able to modify protected parts of the file system...

6.6AI score0.00247EPSS
SaveExploits0References6
Rows per page
Query Builder