PT-2023-4078 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.5 Description: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue may allow an app to determine a user’s current location. The vulnerability is...

Apple macOS Ventura 安全漏洞

Apple macOS Ventura is a desktop operating system from the American company Apple. Apple macOS Ventura suffers from an information disclosure vulnerability that can be exploited by an attacker to determine a user's current location...

PT-2023-5808 · Apple · Macos Monterey +4

Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions 11.7.9 and earlier iOS versions 15.7.8 and earlier iPadOS versions 15.7.8 and earlier macOS Monterey versions 12.6.8 and earlier Description: A privacy issue was addressed with improved private data redaction for log...

PT-2023-27427 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.5 Description: A privacy issue was addressed with improved private data redaction for log entries. This issue allows an app to potentially read sensitive location information. Recommendations: For versions prior to...

PT-2023-4193 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.6.8 macOS versions prior to 13.5 iOS versions prior to 15.7.8 iOS versions prior to 16.6 iPadOS versions prior to 15.7.8 iPadOS versions prior to 16.6 watchOS versions prior to 9.6 Description: The issue is related ...

PT-2023-8418 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.6 iPadOS versions prior to 16.6 macOS Ventura versions prior to 13.5 Description: A privacy issue was addressed with improved private data redaction for log entries. This issue may allow an app to read sensitive...

Apple macOS Ventura 安全漏洞

Apple macOS Ventura is a desktop operating system by Apple Inc. A security vulnerability exists in Apple macOS Ventura, which stems from a logical issue where an application may be able to read sensitive location information...

About the security content of watchOS 9.6

About the security content of watchOS 9.6 This document describes the security content of watchOS 9.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

About the security content of iOS 15.7.8 and iPadOS 15.7.8

About the security content of iOS 15.7.8 and iPadOS 15.7.8 This document describes the security content of iOS 15.7.8 and iPadOS 15.7.8. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

PT-2023-24343 · WordPress · Auto Location For Wp Job Manager Via Google

Name of the Vulnerable Software and Affected Versions: Auto Location for WP Job Manager via Google WordPress plugin versions prior to 1.1 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is...

PT-2023-26528 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.5 Description: The issue allows an app to potentially determine a user's current location due to insufficient redaction of sensitive information. This has been addressed with improved redaction of sensitive...

About the security content of macOS Ventura 13.5

About the security content of macOS Ventura 13.5 This document describes the security content of macOS Ventura 13.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

CVE-2023-31461

Attackers can exploit an open API listener on SteelSeries GG 36.0.0 to create a sub-application that will be executed automatically from a controlled location, because of a path traversal vulnerability...

Path traversal

Attackers can exploit an open API listener on SteelSeries GG 36.0.0 to create a sub-application that will be executed automatically from a controlled location, because of a path traversal vulnerability...

Cross site request forgery (csrf)

The 3DPrint WordPress plugin before 3.5.6.9 does not protect against CSRF attacks in the modified version of Tiny File Manager included with the plugin, allowing an attacker to craft a malicious request that will create an archive of any files or directories on the target server by tricking a...

CVE-2022-4023 3DPrint < 3.5.6.9 - CSRF to arbitrary file downlad

The 3DPrint WordPress plugin before 3.5.6.9 does not protect against CSRF attacks in the modified version of Tiny File Manager included with the plugin, allowing an attacker to craft a malicious request that will create an archive of any files or directories on the target server by tricking a...

Sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester House Rental and Property Listing 1.0. This issue affects some unknown processing of the file index.php. The manipulation of the argument keywords/location leads to sql injection. The attack may be initiated...

House Rental and Property Listing SQL注入漏洞

House Rental and Property Listing is a system developed in PHP, JavaScript, Bootstrap, CSS and MySQL database. It makes it easy for users to find the right house or property for rent. An injection vulnerability exists in House Rental and Property Listing version 1.0, which stems from a SQL...

Nude Videos of Kids From Hacked Baby Monitors Were Sold on Telegram

Plus: A fitness app may have leaked the location of a murdered submarine captain, the privacy risks of filing taxes online, and how Facebook data was used in an abortion trial...

SUSE CVE-2023-28362

The redirectto method in Rails allows provided values to contain characters which are not legal in an HTTP header value. This results in the potential for downstream services which enforce RFC compliance on HTTP response headers to remove the assigned Location header...