PT-2018-18015 · Privatevpn +1 · Privatevpn +1

Name of the Vulnerable Software and Affected Versions: PrivateVPN version 2.0.31 for macOS Description: The software installs a privileged helper tool that runs as the root user, which is installed as a LaunchDaemon and implements an XPC service. This XPC service handles new VPN connection...

Year-Old Coldroot RAT Targets MacOS, Still Evades Detection

Researchers are warning users about the Coldroot remote access Trojan that is going undetected by AV engines and targets MacOS computers. The RAT is cross-platform and capable of planting a keylogger on MacOS systems prior to the OS High Sierra and is designed to steal banking credentials. Coldro...

Mailbutler Shimo Elevation of Privilege Vulnerability

Shimo is a multi-protocol VPN client for Mac OS. An elevation of privilege vulnerability exists in Mailbutler Shimo before 4.1.5.1. The vulnerability arises because com.feingeist.shimo.helper tool LaunchDaemon implements an unprotected XPC service. An attacker can use this vulnerability to execut...

PureVPN for macOS Elevation of Privilege Vulnerability

PureVPN for macOS is a suite of VPN software for the macOS platform. A security vulnerability exists in version 6.0.1 of PureVPN for macOS based platform, which stems from HelperTool LaunchDaemon implementing an unprotected XPC service. An attacker can exploit the vulnerability to execute system...