IINA 参数注入漏洞

IINA is an open-source modern macOS video player developed by IINA. Versions of IINA prior to 1.4.3 had a parameter injection vulnerability. This vulnerability stemmed from the lack of validation for the mpvoptions/input-commands parameter via the custom URL scheme iina://open. This allowed remot...

CVE-2025-34324

GoSign Desktop versions 2.4.0 and earlier use an unsigned update manifest for distributing application updates. The manifest contains package URLs and SHA-256 hashes but is not digitally signed, so its authenticity relies solely on the underlying TLS channel. In affected versions, TLS certificate...

EUVD-2020-20396

Malware in sbrugna...

SAP macOS-enterprise-privileges buffer overflow vulnerability

SAP macOS-enterprise-privileges is an application from SAP Germany that provides a quick and easy way to get administrator privileges when needed. A buffer overflow vulnerability exists in SAP macOS-enterprise-privileges versions prior to 1.5.4. An attacker could exploit this vulnerability to cau...