The vulnerability of the LaunchServices service in operating systems such as macOS, iOS, iPadOS, tvOS, and watchOS allows attackers to circumvent security restrictions and gain increased privileges.

The vulnerability of the LaunchServices service in operating systems such as macOS, iOS, iPadOS, tvOS, and watchOS is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain increased privileges...

Security Advisory 0112

Security Advisory 0112 . CSAF PDF Date: March 11, 2025 Revision | Date | Changes ---|---|--- 1.0 | March 11, 2025 | Initial release The CVE-ID tracking this issue: CVE-2024-9448 CVSSv3.1 Base Score: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Common Weakness Enumeration: CWE-284 Improper...

SAP Commerce 跨站脚本漏洞

SAP Commerce is a set of cloud-based e-commerce platforms from Germany's SAP. It supports sales management, marketing management, order management, and operations management. A cross-site scripting vulnerability exists in SAP Commerce that stems from insufficient input validation and could lead t...

CVE-2025-27610

creationtimestamp| type| source ---|---|--- 2025-03-10 22:40:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7074 2025-03-11 00:54:04+00:00| seen| https://t.me/cvedetector/20000 2025-03-11 04:41:13+00:00| seen| Telegram/HMAWwcay4hklj3BM91LAZxDwOui412reXuT0Q0CnkrnI9Zt...

CVE-2025-2135

creationtimestamp| type| source ---|---|--- 2025-03-10 21:51:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114140348492064450 2025-03-10 23:13:36+00:00| seen| https://t.me/cvedetector/19984 2025-03-10 23:51:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk2qmpalcz...

CVE-2022-43454

A double free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An app may be able to execute arbitrary code with kernel privileges...

CVE-2024-44227

The issue was addressed with improved memory handling. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2024-44192

The issue was addressed with improved checks. This issue is fixed in watchOS 11, macOS Sequoia 15, Safari 18, visionOS 2, iOS 18 and iPadOS 18, tvOS 18. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2025-24813

creationtimestamp| type| source ---|---|--- 2025-03-10 17:14:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lk22hs7zke24 2025-03-10 17:38:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7027 2025-03-10 17:45:38+00:00| seen|...

Over 1000 Malicious Packages Found Exploiting Open-Source Platforms

Over 1,000 malicious packages found using low file counts, suspicious installs, and hidden APIs. Learn key detection methods…...

CVE-2024-13918

creationtimestamp| type| source ---|---|--- 2025-03-10 10:39:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6989 2025-03-10 11:40:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljzhrxmaoz2h 2025-03-10 11:48:30+00:00| seen|...

CVE-2025-27253

creationtimestamp| type| source ---|---|--- 2025-03-10 09:41:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6987 2025-03-10 11:40:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljzhryj5on2l 2025-03-10 12:21:00+00:00| seen| https://t.me/cvedetector/19949 2025-03-10...

The vulnerability of the SAML (Security Assertion Markup Language) technology used in Git-based software platforms for collaborative code development on GitLab allows attackers to increase their privileges.

The vulnerability of the SAML Security Assertion Markup Language technology used in Git-based software platforms for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow attackers to increase their privileges...

Intel 2025.1 IPU – BIOS February 2025 Security Update

Intel has informed HP of potential security vulnerabilities in firmware for some Intel® Processors, which might allow escalation of privilege, denial of service, or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Intel has released updates ...

CVE-2024-13359

creationtimestamp| type| source ---|---|--- 2025-03-08 09:36:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6939 2025-03-08 11:48:18+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114126651218617680 2025-03-08 12:35:29+00:00| seen|...

CVE-2024-11087

creationtimestamp| type| source ---|---|--- 2025-03-08 07:36:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6928 2025-03-08 09:20:06+00:00| seen| https://t.me/cvedetector/19882 2025-03-08 09:48:34+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114126180438778382 2025-03-...

CVE-2024-13655

creationtimestamp| type| source ---|---|--- 2025-03-07 07:37:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6804 2025-03-07 08:34:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljrlz4vzhl2u 2025-03-07 09:48:54+00:00| seen|...

SUSE CVE-2023-40403

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information...

Linux Distros Unpatched Vulnerability : CVE-2024-35909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: Split 64bit accesses to fix alignment issues Some of the registers are...

Linux Distros Unpatched Vulnerability : CVE-2024-35989

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms During the removal of the idx...