EUVD-2014-1340

Malware in sbrugna...

EUVD-2014-1333

Malware in sbrugna...

@deploysentinel/playwright-watch (>=0.1.0, <=0.2.2), @finsemble/finsemble-core (>=1.0.0-beta-9, <=8.7.0) +9 more potentially affected by CVE-2023-39956 via electron (>=22.0.0, <=22.3.13)

electron NPM version =22.0.0, =0.1.0, =1.0.0-beta-9, =1.0.0-beta-9, =9.13.1, =60.0.0-pre1, =0.0.1-alpha.2022-12-11.1670718306317, =1.3.0, =0.0.87, =2.0.92, =2.0.98 Source cves: CVE-2023-39956 Source advisory: OSV:GHSA-7X97-J373-85X5...

Sandbox Escape: OSX ATS memory corruption may lead to App Sandbox bypass

This issue was reported directly to Apple and has been resolved in OSX Security Update 2014-001. http://support.apple.com/kb/HT6150 Available for: OS X Mavericks 10.9 and 10.9.1 Impact: The App Sandbox may be bypassed Description: A memory corruption issue existed in the handling of Mach messages...

Design/Logic Flaw

App Sandbox in Apple Mac OS X before 10.9 allows attackers to bypass intended sandbox restrictions via a crafted app that uses the LaunchServices interface to specify process arguments...