7452 matches found
CVE-2025-31241
A double free issue was addressed with improved memory management. This issue is fixed in watchOS 11.5, macOS Sonoma 14.7.6, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, macOS Ventura 13.7.6. A remote attacker may cause an unexpected app termination...
CVE-2025-31217
CVE-2025-31217 involves memory-safe crashes in Safari-related processing of web content caused by insufficient input handling. The issue is addressed in Safari 18.5 and is fixed across Apple platforms: iOS 18.5, iPadOS 18.5, watchOS 11.5, tvOS 18.5, macOS Sequoia 15.5, and visionOS 2.5. The vulne...
CVE-2025-31223
The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to memory corruption...
Apple多款产品 安全漏洞
Apple iOS is an operating system developed for mobile devices. apple watchOS is an operating system for smartwatches. apple iPadOS is an operating system for iPad tablet computers. A security vulnerability exists in several Apple products that stems from an information disclosure issue that could...
PT-2025-20760 · Apple · Ipados +8
Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 11.5 macOS Sonoma versions prior to 14.7.6 tvOS versions prior to 18.5 iPadOS versions prior to 17.7.7 iOS versions prior to 18.5 iPadOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions...
Malicious code in com.unity.platforms (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 161c7b1f35e6c192a0f74cd71cf87b2b6436cc4528a32757f6901c2ce6ff7c07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-13759
creationtimestamp| type| source ---|---|--- 2025-05-09 16:05:04+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loqskak4qcw2 2025-05-09 16:12:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114478753232862764 2025-05-09...
CVE-2025-3528
creationtimestamp| type| source ---|---|--- 2025-05-09 12:26:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15715 2025-05-09 12:41:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loqh7e4kk52l 2025-05-09 12:53:16+00:00| seen|...
CVE-2025-33072
creationtimestamp| type| source ---|---|--- 2025-05-08 22:25:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15635 2025-05-08 22:42:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114474625505155153 2025-05-08 23:15:39+00:00| seen|...
Cyber criminals impersonate payroll, HR and benefits platforms to steal information and funds
The relentless battle against online fraud is a constant evolution, a digital chase where security teams and malicious actors continually adapt. The increasing sophistication of attacks is blurring the lines between legitimate user behavior and impersonation attempts. The campaign we are exposing...
CVE-2025-31644
creationtimestamp| type| source ---|---|--- 2025-05-07 22:23:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15443 2025-05-07 23:30:25+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lomkcxrvqak2 2025-05-08 00:26:17+00:00| seen|...
Reevaluating SSEs: A Technical Gap Analysis of Last-Mile Protection
Security Service Edge SSE platforms have become the go-to architecture for securing hybrid work and SaaS access. They promise centralized enforcement, simplified connectivity, and consistent policy control across users and devices. But there's a problem: they stop short of where the most sensitiv...
AMD SMM Vulnerabilities February 2025 Security Update
AMD has informed HP of potential vulnerabilities identified in some AMD client platform firmware components, which might allow arbitrary code execution. AMD is releasing firmware updates to mitigate these vulnerabilities. AMD has released updates to mitigate the potential vulnerabilities. HP has...
CVE-2025-0649
creationtimestamp| type| source ---|---|--- 2025-05-06 21:16:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114462962265876830 2025-05-06 22:27:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lojwintqaq24 2025-05-07 00:14:11+00:00| seen|...
CVE-2025-27533
creationtimestamp| type| source ---|---|--- 2025-05-06 13:39:27+00:00| seen| https://seclists.org/oss-sec/2025/q2/105 2025-05-06 16:05:47+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lojb73h7i62v 2025-05-07 09:23:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15288...
Security Advisory 0117
Security Advisory 0117 . CSAF PDF Date: May 6, 2025 Revision | Date | Changes ---|---|--- 1.0 | May 6, 2025 | Initial release 1.1 | May 20, 2025 | Updated affected Arista products Updated mitigation option 3 The CVE-ID tracking this issue: CVE-2025-0936 CVSSv3.1 Base Score: 6.5...
The vulnerability of the WebKit component in the Safari browser on operating systems macOS, iOS, iPadOS, tvOS, visionOS, and watchOS allows a hacker to trigger a service failure.
The vulnerability of the WebKit component in the Safari browser on operating systems macOS, iOS, iPadOS, tvOS, visionOS, and watchOS is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Exploit for Code Injection in Langflow
CVE-2025-3248 Langflow is a low-code platform primarily us...
CVE-2023-53144
In the Linux kernel, the following vulnerability has been resolved: erofs: fix wrong kunmap when using LZMA on HIGHMEM platforms As the call trace shown, the root cause is kunmap incorrect pages: BUG: kernel NULL pointer dereference, address: 00000000 CPU: 1 PID: 40 Comm: kworker/u5:0 Not tainted...
CVE-2023-53144
In the Linux kernel, the following vulnerability has been resolved: erofs: fix wrong kunmap when using LZMA on HIGHMEM platforms As the call trace shown, the root cause is kunmap incorrect pages: BUG: kernel NULL pointer dereference, address: 00000000 CPU: 1 PID: 40 Comm: kworker/u5:0 Not tainted...