CVE-2022-22626

CVE-2022-22626 is an out-of-bounds read vulnerability in macOS related to processing a malicious AppleScript binary. Root cause: improved bounds checking fixed an out-of-bounds read. Affected: macOS Big Sur 11.6.5; macOS Monterey 12.3; Security Update 2022-003 Catalina. Impact and exploitation: c...

CVE-2022-22626

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process...

CVE-2022-22627

CVE-2022-22627 affects macOS systems via an out-of-bounds read that was addressed by improved bounds checking. The vulnerability is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, and macOS Catalina Security Update 2022-003. Processing a maliciously crafted AppleScript binary may lead to unex...

CVE-2022-22627

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process...

CVE-2022-22625

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process...

[SECURITY] Fedora 36 Update: annobin-10.57-3.fc36

This package contains the tools needed to annotate binary files created by compilers, and also the tools needed to examine those annotations. One of the tools is a plugin for GCC that records information about the security options that were in effect when the binary was compiled. Note - the plugi...

[SECURITY] Fedora 35 Update: pesign-113-18.fc35

This package contains the pesign utility for signing UEFI binaries as well as other associated tools...

Schneider Electric IGSS Data Server Path Traversal (CVE-2022-24312)

Binary data schneiderelectricigsscve-2022-24312.nbin...

Safari < 15.4 Multiple Vulnerabilities

Binary data 701395.pasl...

Apple iOS < 15.4 Multiple Vulnerabilities (HT213182)

Binary data appleios154check.nbin...

OPENSUSE-SU-2022:0841-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: - CVE-2022-23853, CVE-2022-25255: Avoid unintentionally using binaries from CWD bsc1195386, bsc1196501...

Google Chrome < 99.0.4844.74 Multiple Vulnerabilities

Binary data 701394.pasl...

Russian Ransomware Gang Retool Custom Hacking Tools of Other APT Groups

A Russian-speaking ransomware outfit likely targeted an unnamed entity in the gambling and gaming sector in Europe and Central America by repurposing custom tools developed by other APT groups like Iran's MuddyWater, new research has found. The unusual attack chain involved the abuse of stolen...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. A buffer error vulnerability exists in Apple macOS Big Sur prior to 11.6.5, which stems from the fact that processing a maliciously crafted AppleScript binary may result in an unexpected application termination or process memory...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. A buffer error vulnerability exists in Apple macOS Big Sur prior to version 11.6.5, which stems from a faulty boundary condition in AppleScript. A remote attacker can trick a victim into running a specially crafted binary to exploit...

Tp-link Tapo C200 Command Injection Vulnerability

A command injection vulnerability exists in Tp-link Tapo C200 1.1.15 and previous firmware versions, which is caused by the presence of a uhttpd binary file that runs as root by default and lacks filtering and escaping. An unauthenticated attacker could use this vulnerability to execute system...

PT-2022-15577 · Apple · Applescript +1

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.6.5 macOS versions prior to 12.3 Security Update versions prior to 2022-003 Catalina Description: An out-of-bounds read issue was addressed with improved bounds checking. Processing a maliciously crafted AppleScript...

Mustang Panda targets European diplomats using enhanced PlugX backdoor

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here Mustang Panda, a Chinese cyberespionage group, has been targeting European diplomats with a revised version of the PlugX backdoor in an ongoing campaign linked to the ongoing conflict in Ukraine. The group, also known as...

CVE-2021-41848

An issue was discovered in Luna Simo PPR1.180610.011/202001031830. It mishandles software updates such that local third-party apps can provide a spoofed software update file that contains an arbitrary shell script and arbitrary ARM binary, where both will be executed as the root user with an...

Dirty Pipe Local Privilege Escalation Exploit

This Metasploit module exploits a vulnerability that has been in the Linux kernel since version 5.8. It allows writing of read only or immutable memory. The vulnerability was fixed in Linux 5.16.11, 5.15.25 and 5.10.102. The module exploits this vulnerability by overwriting a suid binary with the...