EUVD-2014-1340

Malware in sbrugna...

EUVD-2014-1333

Malware in sbrugna...

@deploysentinel/playwright-watch (>=0.1.0, <=0.2.2), @finsemble/finsemble-core (>=1.0.0-beta-9, <=8.7.0) +9 more potentially affected by CVE-2023-39956 via electron (>=22.0.0, <=22.3.13)

electron NPM version =22.0.0, =0.1.0, =1.0.0-beta-9, =1.0.0-beta-9, =9.13.1, =60.0.0-pre1, =0.0.1-alpha.2022-12-11.1670718306317, =1.3.0, =0.0.87, =2.0.92, =2.0.98 Source cves: CVE-2023-39956 Source advisory: OSV:GHSA-7X97-J373-85X5...

PT-2015-1891

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4.1 Description The issue concerns a flaw in the CFPreferences component of the iOS operating system, related to insufficient access restrictions to certain functions. This flaw can be exploited by a remote attack...

CVE-2014-1256: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Apple Type Services ATS in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages...

PT-2014-4042

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.9.2 Description A buffer overflow issue in Apple Type Services ATS allows attackers to bypass the App Sandbox protection mechanism. This is achieved by sending crafted Mach messages. Recommendations For Apple OS...

PT-2014-4041

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.9.2 Description The issue concerns the Apple Type Services ATS in Apple OS X, where it fails to properly validate calls to the free function. This allows attackers to bypass the App Sandbox protection mechanism ...

PT-2014-4048

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.9.2 Description The issue allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages that trigger memory corruption. Recommendations For Apple OS X versions prior to 10.9.2, update...

Sandbox Escape: OSX ATS memory corruption may lead to App Sandbox bypass

This issue was reported directly to Apple and has been resolved in OSX Security Update 2014-001. http://support.apple.com/kb/HT6150 Available for: OS X Mavericks 10.9 and 10.9.1 Impact: The App Sandbox may be bypassed Description: A memory corruption issue existed in the handling of Mach messages...

Design/Logic Flaw

App Sandbox in Apple Mac OS X before 10.9 allows attackers to bypass intended sandbox restrictions via a crafted app that uses the LaunchServices interface to specify process arguments...