dwarf2json

Einleitung dwarf2json ist ein Go-Programm, das Dateien mit Symbol- und Typinformationen verarbeitet, um Volatility3 Intermediate Symbol File ISF JSON-Ausgabe für die Linux- und macOS-Analyse zu erzeugen. Zum Erstellen Go 1.18+ erforderlich: $ go build Zum Ausführen: $ ./dwarf2json --help Usage:...

Wireshark 1.12.x < 1.12.1 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.12.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.1 advisory. - The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark...

hooky

hooky Questo repository è un sottomodulo per https://github.com/markuta/CVE-2024-32002, che contiene un semplice hook situato in y/hooks/post-checkout per aprire la calcolatrice sui sistemi macOS: open -a Calculator.app Maggiori informazioni sulla vulnerabilità sono disponibili qui e qui...

CVE-2026-96396

The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not safely calculate the size of an image buffer when generating QuickLook thumbnails and previews of Affinity document files, leading to an integer overflow and a heap-based buffer overflow. A threat actor could...

CVE-2026-96394

The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not validate image dimensions against the size of the pixel data when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an...

CVE-2026-96395

The Affinity by Canva app for macOS before 3.3.1 October 2026 release did not perform adequate bounds checking when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an Affinity document that, when displayed ...

CVE-2026-96396

The Affinity by Canva application for macOS versions prior to 3.3.1 (October 2026 release) is vulnerable to an integer overflow leading to a heap-based buffer overflow . The flaw occurs because the application does not safely calculate the size of an image buffer when generating QuickLook thumbna...

CVE-2026-96396

The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not safely calculate the size of an image buffer when generating QuickLook thumbnails and previews of Affinity document files, leading to an integer overflow and a heap-based buffer overflow. A threat actor could...

EUVD-2026-95751

The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not safely calculate the size of an image buffer when generating QuickLook thumbnails and previews of Affinity document files, leading to an integer overflow and a heap-based buffer overflow. A threat actor could...

EUVD-2026-95750

The Affinity by Canva app for macOS before 3.3.1 October 2026 release did not perform adequate bounds checking when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an Affinity document that, when displayed ...

CVE-2026-96395

The Affinity by Canva app for macOS before 3.3.1 October 2026 release did not perform adequate bounds checking when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an Affinity document that, when displayed ...

CVE-2026-96395

The Affinity by Canva app for macOS (versions prior to 3.3.1 ) is vulnerable to a heap memory disclosure due to an unchecked palette index in the QuickLook extensions . This flaw occurs because the application fails to perform adequate bounds checking when generating QuickLook thumbnails and prev...

EUVD-2026-95749

The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not validate image dimensions against the size of the pixel data when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an...

CVE-2026-96394

The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not validate image dimensions against the size of the pixel data when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an...

CVE-2026-96394

The Affinity by Canva application for macOS versions prior to 3.3.1 (October 2026 release) is vulnerable to an out-of-bounds heap read (CWE-126). The root cause is a failure to validate image dimensions against the size of pixel data when generating QuickLook thumbnails and previews of Affinity d...

zip: `ZipArchive::extract` creates symbolic links whose attacker-controlled targets are outside the destination directory

In zip 9.0.0-pre2, ZipArchive::extract creates a symbolic link from an archive entry after validating only the output entry path. The link target bytes are passed directly to the platform symlink API, so a malicious archive can create an entry inside the destination that resolves to an...

santa

Santa !NOTE A partir de 2025, Santa ya no cuenta con el mantenimiento de Google. Animamos a los usuarios actuales a migrar a un fork de Santa que se mantenga activamente, como https://github.com/northpolesec/santa. Santa es un sistema de autorización de acceso a binarios y archivos para macOS...

arpy

Arpy Arpy es una herramienta MiTM de suplantación de ARP fácil de usar para Mac. Proporciona 3 funciones específicas: Sniffing de paquetes Dominios visitados Dominios visitados con Gource Cada función se explicará a continuación. SO probados hasta la fecha Darwin 14.3.0 Darwin Kernel Version 14.3...

kemon

Kemon Un framework de código abierto basado en callbacks Pre y Post para la monitorización del kernel de macOS. Noticias de última hora - 08/28/2019 Notas de la versión de macOS Catalina 10.15 Beta 7 https://developer.apple.com/documentation/macosreleasenotes/macoscatalina1015beta7releasenotes...

CLEANSTART-2026-EU28747 mongo-go-driver repository contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS

Security vulnerability affects the external-secrets-operator-fips package. The mongo-go-driver repository contains CGo bindings for GSSAPI Kerberos authentication on Linux and macOS...