macsurf

The modern web, on a 25-year-old Mac. A native browser for the Carbon era, Mac OS 8.6 through Mac OS X 10.6: real CSS, modern JavaScript, and HTTPS on the Mac itself. No proxy, no second machine. MacSurf 2.0.5 on a Power Mac G3 iMac, renderinghackaday.com at full desktop width over native HTTPS...

macsurf v2.0

The modern web, on a 25-year-old Mac. MacSurf is a web browser for Classic Mac OS 9 PowerPC. CSS3, ES5 JavaScript, and PNGs with alpha — running on a G3 iMac. MacSurf is a full-time project. If it brought your old Mac back to the web, every dollar helps keep development going. Also follow the...

EUVD-2001-0102

Malware in sbrugna...

CVE-2022-0778 - Infinite loop in BN_mod_sqrt() reachable when parsing certificates

Security Advisory ID: BSA-2022-1752 Component: OpenSSL Revision: 2.0 The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. More information is at https://www.openssl.org/news/secadv/20220315.txt Affected Products Broca...

Code injection

An issue was discovered on LG mobile devices with Android OS 9 and 10 software on the VZW network. lgeproperty allows property overwrites. The LG ID is LVE-SMP-200016 July 2020...

CVE-2020-25061

CVE-2020-25061 affects LG mobile devices running Android 9–10 on Verizon’s network. The flaw resides in the lge_property mechanism, which allows property overwrites, revealing a root cause related to improper handling of property writes. Reported impact includes partial confidentiality, integrity...

CVE-2020-25061

An issue was discovered on LG mobile devices with Android OS 9 and 10 software on the VZW network. lgeproperty allows property overwrites. The LG ID is LVE-SMP-200016 July 2020...

PT-2020-15921

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS 9 and 10 software Description An issue was discovered that allows property overwrites due to the lge property component. Recommendations For Android OS 9 and 10 software, consider restricting access to the lge...

CVE-2020-25062: Undefined Security Weakness

An issue was discovered on LG mobile devices with Android OS 9 and 10 software. LGTelephonyProvider allows a bypass of intended privilege restrictions. The LG ID is LVE-SMP-200017 July 2020...

PT-2020-15922

Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS 9 and 10 software Description An issue was discovered that allows a bypass of intended privilege restrictions through the LGTelephonyProvider. Recommendations For Android OS 9, consider restricting access to t...

CVE-2020-25061: Undefined Security Weakness

An issue was discovered on LG mobile devices with Android OS 9 and 10 software on the VZW network. lgeproperty allows property overwrites. The LG ID is LVE-SMP-200016 July 2020...

CVE-2020-13840

CVE-2020-13840 affects LG mobile devices running Android 7.2–10 on MTK chipsets. The issue is a buffer overflow in the MTK AT command handler, enabling potential code execution. The LG internal identifier is LVE-SMP-200008 (June 2020). Documents do not provide the exact affected models, firmware ...

CVE-2020-13842: Undefined Security Weakness

An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 MTK chipsets. A dangerous AT command was made available even though it is unused. The LG ID is LVE-SMP-200010 June 2020...

Critical RCE Flaw in Palo Alto Gateways Hits Uber

A remote code-execution RCE vulnerability has been uncovered in the GlobalProtect portal and GlobalProtect Gateway interface security products from Palo Alto Networks. It’s an unusual zero-day case, having been previously unknown but inadvertently fixed in later releases — but some large companie...

OS 9 Launcher QHD - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application OS 9 Launcher QHD published at the 'play' market has multiple vulnerabilities...

CVE-2001-0102

"Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effectively removes the Owner password and allows the Normal user to log in as the Owner account without a password...

CVE-2001-0102

"Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effectively removes the Owner password and allows the Normal user to log in as the Owner account without a password...

CVE-2001-0102

CVE-2001-0102: In Mac OS 9, the “Multiple Users” Control Panel allows a normal user to gain Owner privileges by removing the Users & Groups Data File, effectively removing the Owner password and letting the Normal user log in as Owner without a password. This is a local privilege-escalation via d...

CVE-2001-0102: Undefined Security Weakness

"Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effectively removes the Owner password and allows the Normal user to log in as the Owner account without a password...

Mac OS 9 Multiple Users Control Panel Password Vulnerability

Mac OS 9.04 comes with a 'Multiple Users' Control Panel that allows an administrator called 'Owner' to create user accounts called 'Normal' users with limited access to the computer. The problem is that the Owner password can be removed by a Normal user by moving the 'Users & Groups Data File and...