12 matches found
PT-2025-24328
A vulnerability was detected in MaxSite CMS up to 109. This vulnerability affects unknown code of the file application/maxsite/admin/plugins/auto post/uploads-require-maxsite.php of the component HTTP Header Handler. Performing manipulation of the argument X-Requested-FileName/X-Requested-FileUpD...
Apple Addresses Zero-Day Flaws Exploited in the Wild
Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Apple addressed three zero-day vulnerabilities used in an iPhone exploit chain to deliver the Predator spyware. The vulnerabilities involved were CVE-2023-41991, CVE-2023-41992, and CVE-2023-41993...
Apple iOS < 17.0.1 Multiple Vulnerabilities (HT213926)
Binary data appleios1701check.nbin...
Emergency update! Apple patches three zero-days
Apple has released security updates for several products to address a handful of zero-day vulnerabilities that may already have been used by criminals. Updates are available for: iOS 16.7 and iPadOS 16.7 iOS 17.0.1 and iPadOS 17.0.1 watchOS 9.6.3 watchOS 10.0.1 macOS Ventura 13.6 macOS Monterey...
Apple Rushes to Patch 3 New Zero-Day Flaws: iOS, macOS, Safari, and More Vulnerable
Apple has released yet another round of security patches to address three actively exploited zero-day flaws impacting iOS, iPadOS, macOS, watchOS, and Safari, taking the total tally of zero-day bugs discovered in its software this year to 16. The list of security vulnerabilities is as follows -...
CVE-2023-41991
creationtimestamp| type| source ---|---|--- 2023-09-21 22:30:41+00:00| exploited| https://t.me/cibsecurity/70918 2023-09-22 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1116 2023-09-22 04:40:06+00:00| exploited| https://t.me/KomunitiSiber/830 2023-09-22 04:50:39+00:00|...
CVE-2023-41991
CVE-2023-41991 is an Apple certificate validation issue that could allow a malicious app to bypass signature validation. It affects iOS, iPadOS, macOS, and watchOS; root cause is improper certificate validation in the trust chain. Impact: potential privilege escalation or bypass of app integrity ...
CVE-2023-41991
A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7. Recen...
macOS 13.x < 13.6 Multiple Vulnerabilities (HT213931)
The remote host is running a version of macOS / Mac OS X that is 13.x prior to 13.6. It is, therefore, affected by multiple vulnerabilities: - A malicious app may be able to bypass signature validation. CVE-2023-41991 - A local attacker may be able to elevate their privileges CVE-2023-41992 Note...
About the security content of watchOS 9.6.3
About the security content of watchOS 9.6.3 This document describes the security content of watchOS 9.6.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
About the security content of watchOS 10.0.1
About the security content of watchOS 10.0.1 This document describes the security content of watchOS 10.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
