42733 matches found
EUVD-2026-94307
GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames interpolated unescaped into the Show in Finder AppleScript. Attackers can commit a file whose path contains a double quote followed by a do...
CVE-2026-106059 GitAhead through 2.7.1 on macOS Command Injection via Show in Finder AppleScript
GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames interpolated unescaped into the Show in Finder AppleScript. Attackers can commit a file whose path contains a double quote followed by a do...
CVE-2026-106059
GitAhead versions through 2.7.1 on macOS are vulnerable to a command injection vulnerability (CWE-78). The root cause is the unescaped interpolation of repository filenames into the Show in Finder AppleScript . An attacker can execute arbitrary shell commands by committing a file with a path cont...
CVE-2026-106059 GitAhead through 2.7.1 on macOS Command Injection via Show in Finder AppleScript
GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames interpolated unescaped into the Show in Finder AppleScript. Attackers can commit a file whose path contains a double quote followed by a do...
CVE-2026-43805-PoC
CVE-2026-43805: IODMACommand State Race Analysis and PoC This is an analysis that found the missing state lock in Apple IOKit's IODMACommand::PerformOperationImpl through a macOS 26.5/26.6 kernel binary diff. In the vulnerable build, while PerformOperation is using the ready state and memory...
EUVD-2026-94050
In sshd in OpenSSH through 10.6, use of the macOS 27 or later SDK has the side effect of loss of sandboxing, which is potentially unexpected...
Wireshark 1.10.x < 1.10.9 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.10.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.10.9 advisory. - The dissectberconstrainedbitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissecto...
Wireshark 1.4.x < 1.4.12 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.4.12. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.12 advisory. - The ANSI A dissector could dereference a NULL pointer and crash. It may be possible to make Wireshark...
Wireshark 1.10.x < 1.10.10 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.10.10. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.10.10 advisory. - The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark...
Wireshark 1.4.x < 1.4.13 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.4.13. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.13 advisory. - Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not...
CVE-2026-88514
A vulnerability in iTerm2 for macOS before version 3.6.12 allows a local attacker to obtain sensitive information . The issue is associated with CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor). While the documents confirm the existence of the vulnerability and its impact on c...
CVE-2026-88514
An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information...
EUVD-2026-94359
An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information...
PT-2026-107510
An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information...
CVE-2026-88514: Exposure of Sensitive Information to an Unauthorized Actor
An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information...
CVE-2026-88514
An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information...
CVE-2026-106059: Improper Neutralization of Special Elements used in an OS Command
GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames interpolated unescaped into the Show in Finder AppleScript. Attackers can commit a file whose path contains a double quote followed by a do...
PT-2026-107484
Name of the Vulnerable Software and Affected Versions GitAhead versions prior to 2.7.2 Description On macOS, a command injection issue exists where repository filenames are interpolated without proper escaping into the Show in Finder AppleScript. An attacker can commit a file with a path containi...
Wireshark 1.8.x < 1.8.11 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.8.11. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.8.11 advisory. - epan/dissectors/packet-tcp.c in the TCP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before...
Wireshark 1.8.x < 1.8.8 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.8.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.8.8 advisory. - The dissectpft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.6...