CVE-2023-41075

A type confusion issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7.5, macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-28197

CVE-2023-28197 is an Apple macOS vulnerability described as an access issue that could allow an app to access user‑sensitive data. The issue is addressed by sandbox/security restrictions and is fixed in macOS updates: Ventura 13.3, Big Sur 11.7.5, and Monterey 12.6.4. The NVD and Red Hat entries ...

CVE-2023-28197

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6.4. An app may be able to access user-sensitive data...

CVE-2023-42831

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.8, macOS Ventura 13.5. An app may be able to fingerprint the user...

CVE-2023-32378

CVE-2023-32378 is a use-after-free in macOS IOAcceleratorFamily that could allow an app to execute arbitrary code with kernel privileges. Impact and fixes are documented for macOS Big Sur (11.7.5), Monterey (12.6.4), and Ventura (13.3). Exploitation status is not detailed in the provided documents.

CVE-2023-32378

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6.4. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-32378

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6.4. An app may be able to execute arbitrary code with kernel privileges...

Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager

CVE-2022-1388 PoC for CVE-2022-1388 affecting F5 BIG-IP. Us...

Important: kernel

Issue Overview: An issue was discovered in the Linux kernel through 6.5.9. During a race with SQ thread exit, an iouring/fdinfo.c iouringshowfdinfo NULL pointer dereference can occur. CVE-2023-46862 When a router encounters an IPv6 packet too big to transmit to the next-hop, it returns an ICMP6...

Important: kernel

Issue Overview: A race condition leading to a use-after-free issue was found in the QXL driver in the Linux kernel. CVE-2023-39198 An issue was discovered in the Linux kernel through 6.5.9. During a race with SQ thread exit, an iouring/fdinfo.c iouringshowfdinfo NULL pointer dereference can occur...

Amazon Linux AMI : kernel (ALAS-2024-1899)

The version of kernel installed on the remote host is prior to 4.14.334-177.552. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1899 advisory. 2024-07-03: CVE-2023-52813 was added to this advisory. 2024-06-07: CVE-2023-52881 was added to this advisory...

Amazon Linux 2 : kernel (ALAS-2024-2391)

The version of kernel installed on the remote host is prior to 4.14.334-252.552. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2391 advisory. 2024-12-05: CVE-2023-52809 was added to this advisory. 2024-12-05: CVE-2023-52759 was added to this advisory...

Important: kernel

Issue Overview: A use-after-free flaw was found in qdiscgraft in net/sched/schapi.c in the Linux Kernel due to a race problem. This flaw leads to a denial of service issue. CVE-2023-0590 A race condition leading to a use-after-free issue was found in the QXL driver in the Linux kernel...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2024-057)

The version of kernel installed on the remote host is prior to 5.4.265-176.364. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2024-057 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: double hook...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: double hook unregistration in netns path CVE-2022-49558 A race condition leading to a use-after-free issue was found in the QXL driver in the Linux kernel. CVE-2023-39198 A use-after-free...

Apple’s iPhone Hack Attack Warnings Spark Political Firestorm in India

By Waqas Big Tech vs. Big Brother: Apple Defies India Pressure over iPhone Hacking Alerts. This is a post from HackRead.com Read the original post: Apples iPhone Hack Attack Warnings Spark Political Firestorm in India...

Microsoft Warns of New 'FalseFont' Backdoor Targeting the Defense Sector

Organizations in the Defense Industrial Base DIB sector are in the crosshairs of an Iranian threat actor as part of a campaign designed to deliver a never-before-seen backdoor called FalseFont. The findings come from Microsoft, which is tracking the activity under its weather-themed moniker Peach...

big-bag-brecher.de Improper Access Control vulnerability OBB-3817508

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-49165

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Real Big Plugins Client Dash allows Stored XSS.This issue affects Client Dash: from n/a through 2.2.1...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Real Big Plugins Client Dash allows Stored XSS.This issue affects Client Dash: from n/a through 2.2.1...