CVE-2023-22899

A flaw was found in Zip4j. In this issue, it does not always check the MAC when decrypting a ZIP archive...

Apple Safari 资源管理错误漏洞

Apple Safari is a web browser from Apple Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. Apple Safari version 16.4.1 suffers from a resource management error vulnerability that originates from memory reuse after release. An attacker could exploit this...

MAC 1200R - Directory Traversal

Exploit Title: MAC 1200R - Directory Traversal Google Dork: "MAC1200R" && port="8888" Date: 2023/03/09 Exploit Author: Chunlei Shang, Jiangsu Public Information Co., Ltd. Vendor Homepage: https://www.mercurycom.com.cn/ Software Link: https://www.mercurycom.com.cn/product-1-1.html Version: all...

PT-2023-2614

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 15.7.5 and 16.4.1 Apple iPadOS versions prior to 15.7.5 and 16.4.1 Apple macOS versions prior to 11.7.6, 12.6.5, and 13.3.1 Description An out-of-bounds write issue was addressed with improved input validation,...

Google Chrome Security Updates (stable-channel-update-for-desktop-2023-04) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Foxit PDF Editor for Mac < 11.1.4 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor for Mac application previously named Foxit PhantomPDF for Mac installed on the remote macOS host is prior to 11.1.4. It is, therefore affected multiple vulnerabilities, including the following: - A null pointer dereference that could lead to a denial...

CVE-2023-1752

The listed versions of Nexx Smart Home devices could allow any user to register an already registered alarm or associated device with only the device’s MAC address...

CVE-2023-1752

The listed versions of Nexx Smart Home devices could allow any user to register an already registered alarm or associated device with only the device’s MAC address...

Design/Logic Flaw

The listed versions of Nexx Smart Home devices could allow any user to register an already registered alarm or associated device with only the device’s MAC address...

CVE-2023-1752 CVE-2023-1752

The listed versions of Nexx Smart Home devices could allow any user to register an already registered alarm or associated device with only the device’s MAC address...

CVE-2023-1752 CVE-2023-1752

The listed versions of Nexx Smart Home devices could allow any user to register an already registered alarm or associated device with only the device’s MAC address...

CVE-2023-1752

CVE-2023-1752 affects Nexx Smart Home devices (Nexx Garage Door Controller NXG-100B/NXG-200; Nexx Smart Plug NXPG-100W; Nexx Smart Alarm NXAL-100). Root cause: improper authentication allowing registration of an already registered alarm/associated device using only the device MAC address. Impact ...

CVE-2022-25740 Buffer Copy Without Checking Size of Input in MODEM

Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface...

CVE-2022-25740 Buffer Copy Without Checking Size of Input in MODEM

Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface...

多款Nexx产品授权问题漏洞

Nexx Garage Door Controller and others are products of Nexx Corporation.Nexx Garage Door Controller is a garage door controller.Nexx Smart Plug is a smart plug.Nexx Smart Alarm is a smart alarm. A security vulnerability exists in the Nexx Smart Home Device that stems from allowing any user to...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 112 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 112.0.5615.49 Linux and Mac, 112.0.5615.49/50 Windows contains a number of fixes and improvements -- a list of changes is...

PT-2023-12816 · Qualcomm · 9205 Lte Modem Firmware +18

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue involves memory corruption in a modem due to a buffer overwrite. This occurs when building an IPv6 multicast address based on the MAC address of an interface. Recommendations:...

The vulnerability of the Toolgate component in Parallels Desktop for Mac allows a hacker to execute arbitrary code and increase their privileges.

The vulnerability of the Toolgate supervisor in Parallels Desktop for Mac relates to errors in processing the relative path to the restricted access directory. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges...

Antivirus Exclusions for Veeam Agent for Mac

Purpose This article documents antivirus exclusions that may be created to reduce the impact that antivirus software has on the functionality of Veeam Agent for Mac. Note: Antivirus will not always cause Veeam Agent for Mac functions to fail; antivirus software may also negatively impact backup...

Bypassing Wi-Fi Encryption by Manipulating Transmit Queues (Framing Frames)

Vulnerability in IEEE 802.11 implementation is found. A malicious insider can intercept traffic at the MAC layer by disconnecting a victim and connecting to the network using the victim’s MAC address and the attacker’s credentials even if clients are prevented from communicating with each other...