Tenda Ax3 Heap Overflow Vulnerability

Tenda Ax3 is an Ax1800 Gigabit port dual-band Wifi 6 wireless router from Tenda China. Tenda AX3 has a security vulnerability that can be exploited by attackers to cause a denial of service DoS via the mac parameter...

Latest Mac Coinminer Utilizes Open-Source Binaries and the I2P Network

A Mac coinminer has been spotted using open-source components in its routine and the I2P Network to hide its traffic. We dive into old iterations of this malware, and also analyze the newest version...

Microsoft Outlook for Mac Hyperlink UI Misrepresentation Vulnerability

This vulnerability allows remote attackers to disguise the target of hyperlinks on affected installations of Microsoft Outlook for Mac. User interaction is required to exploit this vulnerability in that the target must view a malicious email. The specific flaw exists within the rendering of HTML ...

plist.js 安全漏洞

plist.js is a Mac OS X Plist parser/builder for Node.js and browsers. A security vulnerability exists in versions of plist.js prior to v3.0.4, which can be exploited by attackers to cause a denial of service DoS and possibly execute remote code...

Trend Micro Antivirus for Mac Link Following Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Antivirus for Mac. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Google Chrome Security Update (stable-channel-update-for-desktop_14-2022-02) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

New Chrome 0-Day Bug Under Active Attack – Update Your Browser ASAP!

Google on Monday rolled out fixes for eight security issues in the Chrome web browser, including a high-severity vulnerability that's being actively exploited in real-world attacks, marking the first zero-day patched by the internet giant in 2022. The shortcoming, tracked CVE-2022-0609, is...

Apple Mac OS X Security Update (HT213092)

Apple Mac OS X is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Releases Security Updates for Chrome

Google has released Chrome version 98.0.4758.102 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system. One of these vulnerabilities has been detected in exploits in the wild. CISA encourages users and administrato...

Trend Micro Antivirus for Mac 后置链接漏洞

Trend Micro Antivirus for Mac is a suite of antivirus software for the Mac platform from Trend Micro. Trend Micro Antivirus for Mac suffers from a backlink vulnerability that stems from insecure link handling and a vulnerability. An attacker could exploit this vulnerability to execute arbitrary...

Python urllib.parse Vulnerability (bpo-43882) - Mac OS X

Python is prone to a vulnerability urllib.parse. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python"; ifdescription...

phoronix-test-suite 跨站脚本漏洞

phoronix-test-suite is the most comprehensive testing and benchmarking platform for Linux, Solaris, macOS, Windows and BSD operating systems. A cross-site scripting vulnerability exists in phoronix-test-suite that stems from the presence of an XSS...

Stable Channel Update for Desktop

The Stable channel has been updated to 98.0.4758.102 for Windows, Mac and Linux which will roll out over the coming days/weeks. Extended stable channel has also been updated to 98.0.4758.102 for Windows and Mac which will roll out over the coming days/weeks A full list of changes in this build is...

Use of a Broken or Risky Cryptographic Algorithm

A padding oracle vulnerability exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. The SDK allows users to encrypt files with AES-CBC without computing a Message Authentication Code MAC, which then allows an attacker who has write access to the target's S3 bucket and can observe...

Microsoft Outlook for Mac Security Feature Bypass Vulnerability

Microsoft Outlook for Mac is a Mac-based email client software bundled with the Office suite from Microsoft Corporation. The software manages email, contacts, calendars, etc. Microsoft Outlook for Mac has a security vulnerability for which no detailed vulnerability details are available...

Mozilla Firefox ESR Security Advisories (MFSA2022-04, MFSA2022-05) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

VulnCheck KEV: CVE-2014-4404

Heap-based buffer overflow in IOHIDFamily in Apple OS X, which affects, iOS before 8 and Apple TV before 7, allows attackers to execute arbitrary code in a privileged context...

VulnCheck KEV: CVE-2015-1130

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges...

PT-2022-1534 · Apple +7 · Webkit +13

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 15.3 iOS versions prior to 15.3.1 iPadOS versions prior to 15.3.1 macOS Monterey versions prior to 12.2.1 PS4 versions 6.xx through 9.xx PS5 versions 1.xx through 5.xx Description: The issue is related to a...

Adobe Illustrator Multiple Vulnerabilities (APSB22-07) - Mac OS X

Adobe Illustrator is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...