CVE-2024-23482

The ZScaler service is susceptible to a local privilege escalation vulnerability found in the ZScalerService process. Fixed Version: Mac ZApp 4.2.0.241 and later...

CVE-2024-23482 ZScalerService Local Privilege Escalation

The ZScaler service is susceptible to a local privilege escalation vulnerability found in the ZScalerService process. Fixed Version: Mac ZApp 4.2.0.241 and later...

CVE-2024-23482 ZScalerService Local Privilege Escalation

The ZScaler service is susceptible to a local privilege escalation vulnerability found in the ZScalerService process. Fixed Version: Mac ZApp 4.2.0.241 and later...

CVE-2024-23482

CVE-2024-23482 describes a local privilege escalation in the ZScalerService process of Zscaler Client Connector for macOS. Affected: Zscaler Mac ZApp versions prior to 4.2.0.241. Root cause: local privilege escalation in ZScalerService. Impact is high for confidentiality, integrity, and availabil...

TOTOLINK X2000R MAC-address filtering XSS

The vulnerability of the MAC-address filtering component of the TOTOLINK X2000R microprogrammable router exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

Tenda AC7: Operating System Command Injection Vulnerability

Tenda AC7 is a 1200M dual-band wireless router designed for large households by Tenda Technology, which adopts 802.11ac standard and supports dual-band concurrent transmission with wireless rate up to 1167Mbps. Tenda AC7 suffers from a command injection vulnerability that stems from a buffer...

PT-2024-19891 · Zscaler · Zscaler +2

Name of the Vulnerable Software and Affected Versions: ZScaler versions prior to 4.2.0.241 Description: The ZScaler service is susceptible to a local privilege escalation issue found in the ZScalerService process. Recommendations: For versions prior to 4.2.0.241, update to Mac ZApp 4.2.0.241 or...

Tenda AC15 formWriteFacMac Method Command Injection Vulnerability

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol with a theoretical transmission rate of 1900Mbps 600Mbps in 2.4GHz band and 1300Mbps in 5GHz band. Tenda AC15 suffers from a command injection vulnerabilit...

CVE-2024-23482: Improper Input Validation

The ZScaler service is susceptible to a local privilege escalation vulnerability found in the ZScalerService process. Fixed Version: Mac ZApp 4.2.0.241 and later...

CVE-2024-2903: Stack-based Buffer Overflow

A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch the attack remotely...

Stable Channel Update for Desktop

The Stable channel has been updated to 123.0.6312.86/.87 for Windows and Mac and 123.0.6312.86 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

Mozilla Firefox Security Update (MFSA2024-12) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox Security Update (MFSA2024-15) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox ESR Security Update (MFSA2024-13) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mozilla Thunderbird Security Update (MFSA2024-14) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

Mozilla Firefox ESR Security Update (MFSA2024-16) - Mac OS X

Mozilla Firefox ESR is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2024-20059

Name of the Vulnerable Software and Affected Versions ClickUp Desktop versions prior to 3.3.77 Description The issue allows code injection due to specific Electron Fuses, with inadequate protection against code injection through settings such as RunAsNode. This affects both macOS and Windows...

CVE-2024-2812

A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20multi. It has been classified as critical. This affects the function formWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac leads to os command injection. It is possible to initiate the attack remotely. The...

Tenda AC15: Operating System Command Injection Vulnerability

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol with a theoretical transmission rate of 1900Mbps 600Mbps in 2.4GHz band and 1300Mbps in 5GHz band. Tenda AC15 suffers from a command injection vulnerabilit...

Mozilla Firefox ESR < 115.9.1

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.9.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2024-16 advisory. - An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript...