25890 matches found
Sceiner firmware locks and associated devices are vulnerable to encryption downgrade and arbitrary file upload attacks
Overview Sciener is a company that develops software and hardware for electronic locks that are marketed under many different brands. Their hardware works in tandem with an app, called the TTLock app, which is also produced by Sciener. The TTLock app utilizes Bluetooth connections to connect to...
PT-2024-19736 · Apple · Macos Sonoma +4
Name of the Vulnerable Software and Affected Versions: tvOS versions prior to 17.4 iOS versions prior to 17.4 iPadOS versions prior to 17.4 macOS Sonoma versions prior to 14.4 Description: This issue was addressed through improved state management. An app may be able to leak sensitive user...
Apple macOS Sonoma Security Vulnerability
Apple macOS Sonoma is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma version 14.4, which stems from an application that may be able to access sensitive user data...
PT-2024-19767 · Apple · Macos Sonoma +4
Name of the Vulnerable Software and Affected Versions: Safari versions prior to 17.4 iOS versions prior to 17.4 iPadOS versions prior to 17.4 macOS Sonoma versions prior to 14.4 Description: The issue was addressed through improved state management, affecting Private Browsing tabs which may be...
PT-2024-19784 · Apple · Macos Sonoma +5
Name of the Vulnerable Software and Affected Versions: Apple tvOS versions prior to 17.4 Apple iOS versions prior to 17.4 Apple iPadOS versions prior to 17.4 Apple macOS Sonoma versions prior to 14.4 Apple watchOS versions prior to 10.4 Description: A logic issue was addressed with improved...
PT-2024-19737 · Apple · Macos Sonoma +3
Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.4 iOS versions prior to 17.4 iPadOS versions prior to 17.4 Description: A privacy issue was addressed by not logging contents of text fields, which could allow an app to view Mail data. Recommendations: For...
PT-2024-19772 · Apple · Macos Sonoma +6
Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.6.5 macOS Sonoma versions prior to 14.4 iOS versions prior to 17.4 iPadOS versions prior to 17.4 watchOS versions prior to 10.4 iOS versions prior to 16.7.6 iPadOS versions prior to 16.7.6 tvOS versions prio...
PT-2024-19771 · Apple · Ios +2
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.4 iOS versions prior to 17.4 iPadOS versions prior to 17.4 Description: The issue allows an attacker in a privileged network position to inject keystrokes by spoofing a keyboard. This is achieved through a Bluetooth...
Foxit PDF Editor for Mac < 2024.1 Multiple Vulnerabilities
According to its version, the Foxit PDF Editor for Mac application previously named Foxit PhantomPDF for Mac installed on the remote macOS host is prior to 2024.1. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on...
ssh: Prefix truncation attack on Binary Packet Protocol (BPP)
A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure ...
No “Apple magic” as 11% of macOS detections last year came from malware
We’re going to let you in on a little cybersecurity secret… There’s malware on Mac computers. There pretty much always has been. As revealed in our 2024 ThreatDown State of Malware report, a full 11% of all detections recorded by Malwarebytes on Mac computers in 2023 were for different variants o...
CVE-2024-20834
The sensitive information exposure vulnerability in WlanTest prior to SMR Mar-2024 Release 1 allows local attackers to access MAC address without proper permission...
Information disclosure
The sensitive information exposure vulnerability in WlanTest prior to SMR Mar-2024 Release 1 allows local attackers to access MAC address without proper permission...
CVE-2024-20834
The sensitive information exposure vulnerability in WlanTest prior to SMR Mar-2024 Release 1 allows local attackers to access MAC address without proper permission...
CVE-2024-20834
CVE-2024-20834 affects the WlanTest module in Samsung mobile environments. Affected: WlanTest versions prior to SMR Mar-2024 Release 1. Issue: sensitive information exposure enables local attackers to access the MAC address without permission. Impact: local disclosure of a low-integrity, low-avai...
CVE-2024-20834
The sensitive information exposure vulnerability in WlanTest prior to SMR Mar-2024 Release 1 allows local attackers to access MAC address without proper permission...
Stable Channel Update for Desktop
The Stable channel has been updated to 122.0.6261.111/.112 for Windows and Mac and 122.0.6261.111 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. The Extended Stable channel has been updated to 122.0.6261.112 for Windows and M...
VMware Fusion 13.0.x < 13.5.1 Multiple Vulnerabilities (VMSA-2024-0006)
The version of VMware Fusion installed on the remote macOS or Mac OS X host is 13.0.x prior to 13.5.1. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...
CVE-2024-22452
Dell Display and Peripheral Manager for macOS prior to 1.3 contains an improper access control vulnerability. A low privilege user could potentially exploit this vulnerability by modifying files in the installation folder to execute arbitrary code, leading to privilege escalation...
A week in security (February 26 – March 3)
Last week on Malwarebytes Labs: PikaBot malware on the rise: What organizations need to know Malicious meeting invite fix targets Mac users Pig butchering scams, how they work and how to avoid them Airbnb scam sends you to a fake Tripadvisor site, takes your money Facebook bug could have allowed...