CVE-2025-43356

The webkitgtk component in various Linux distributions and Apple products is vulnerable to a security issue where a website can access sensor information without user consent due to improper cache handling . This issue is fixed in Safari 26 , iOS 18.7 , iPadOS 18.7 , iOS 26 , iPadOS 26 , macOS Ta...

CVE-2025-43203

The issue was addressed with improved handling of caches. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26. An attacker with physical access to an unlocked device may be able to view an image in the most recently viewed locked note...

CVE-2025-43366

Apple's macOS Tahoe (version 26) is affected by an out-of-bounds read vulnerability caused by insufficient boundary checking. This flaw could allow an application to disclose coprocessor memory . The issue has been addressed with improved bounds checking, and the fix is available in macOS Tahoe 2...

CVE-2025-6947

CVE-2025-6947 affects WatchGuard Fireware OS running on Firebox. The issue is a Stored Cross-Site Scripting (XSS) vulnerability in the SIP Proxy module caused by improper input neutralization during web page generation. Exploitation requires an authenticated administrator session to a locally man...

CVE-2025-6947 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy Configuration

A stored cross-site scripting XSS vulnerability exists in the management interface of WatchGuard Firebox appliances via the SIP Proxy configuration. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the Firebox...

nettoolbox

NetToolbox - Network Security Toolkit A comprehensive, modern...

CVE-2025-10440 D-Link DI-8100/DI-8100G/DI-8200/DI-8200G/DI-8003/DI-8003G jhttpd usb_paswd.asp sub_4621DC os command injection

A vulnerability has been found in D-Link DI-8100, DI-8100G, DI-8200, DI-8200G, DI-8003 and DI-8003G 16.07.26A1/17.12.20A1/19.12.10A1. Affected by this vulnerability is the function sub4621DC of the file usbpaswd.asp of the component jhttpd. The manipulation of the argument hname leads to os comma...

MSc-Cybersecurity-Capstone-Android-Exploitation

MSc Cybersecurity Capstone Project Title: Android Exploit...

PT-2026-43421

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26 Description A permissions issue exists where an app may be able to access sensitive user data. This was resolved by removing the vulnerable code. Recommendations Update to macOS Tahoe 26...

PT-2025-37839

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26 tvOS versions prior to 26 visionOS versions prior to 26 watchOS versions prior to 26 macOS Tahoe versions prior to 26 iOS versions prior to 26 iPadOS versions prior to 26 Description The issue was addressed with...

Apple iOS < 16.7.12 Vulnerability (125141)

Binary data appleios16712check.nbin...

Several Apple products have security vulnerabilities

Apple iOS is an operating system developed for mobile devices, Apple tvOS is a smart TV operating system, and Apple watchOS is a smart watch operating system. A security vulnerability exists in several Apple products, which stems from a type confusion issue that could lead to a denial-of-service...

Apple iOS < 18.7 Multiple Vulnerabilities (125109)

Binary data appleios187check.nbin...

PT-2025-41479

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26 Description A logic issue existed due to insufficient validation, allowing an application to bypass Gatekeeper checks. Recommendations Update to macOS Tahoe 26 or later...

PT-2025-37796

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Tahoe 26 Description: A privacy issue was addressed with improved private data redaction for log entries. An application may be able to access user-sensitive data. Recommendations: Update to macOS Tahoe 26 or later...

Chaos Mesh operating system command injection vulnerability

Chaos Mesh is an open source cloud-native engineering platform from Chaos Mesh Open Source. Chaos Mesh suffers from an OS command injection vulnerability that stems from the presence of OS command injection in cleanIptables, which could lead to remote code execution...

Dell Data Domain Operating System Web Interface Detection

Binary data delldatadomainoperatingsystemwebinterfacedetect.nbin...

PT-2025-37805

Name of the Vulnerable Software and Affected Versions: macOS Sequoia versions prior to 15.7 macOS Sonoma versions prior to 14.8 macOS Tahoe versions prior to 26 iOS versions prior to 18.7 iPadOS versions prior to 18.7 Description: A denial-of-service issue was addressed with improved validation. ...

PT-2025-37789

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Tahoe 26 Description: An application may be able to break out of its sandbox due to vulnerable code. The issue was addressed by removing the vulnerable code. Recommendations: Update to macOS Tahoe 26 or later...

PT-2025-37813

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15.7 macOS versions prior to Sonoma 14.8 macOS versions prior to Tahoe 26 Description: A logic issue was addressed with improved checks. A malicious app may be able to access private information. Recommendation...