7965 matches found
CVE-2025-31217
The WebKit framework on watchOS 11.5 (Apple Watch Series 6 and later) is vulnerable to an issue where processing maliciously crafted web content may lead to an unexpected process crash . The root cause was addressed with improved checks . This vulnerability is fixed in Safari 18.5 , iOS 18.5 , iP...
CVE-2025-31223
The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to memory corruption...
Several Apple products have security vulnerabilities
Apple iOS is an operating system developed for mobile devices. apple watchOS is an operating system for smartwatches. apple iPadOS is an operating system for iPad tablet computers. A security vulnerability exists in several Apple products that stems from an information disclosure issue that could...
PT-2025-20760 · Apple · Ipados +8
Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 11.5 macOS Sonoma versions prior to 14.7.6 tvOS versions prior to 18.5 iPadOS versions prior to 17.7.7 iOS versions prior to 18.5 iPadOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions...
Malicious code in com.unity.platforms (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 161c7b1f35e6c192a0f74cd71cf87b2b6436cc4528a32757f6901c2ce6ff7c07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-13759
creationtimestamp| type| source ---|---|--- 2025-05-09 16:05:04+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loqskak4qcw2 2025-05-09 16:12:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114478753232862764 2025-05-09...
CVE-2025-3528
creationtimestamp| type| source ---|---|--- 2025-05-09 12:26:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15715 2025-05-09 12:41:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loqh7e4kk52l 2025-05-09 12:53:16+00:00| seen|...
CVE-2025-33072
creationtimestamp| type| source ---|---|--- 2025-05-08 22:25:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15635 2025-05-08 22:42:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114474625505155153 2025-05-08 23:15:39+00:00| seen|...
Cyber criminals impersonate payroll, HR and benefits platforms to steal information and funds
The relentless battle against online fraud is a constant evolution, a digital chase where security teams and malicious actors continually adapt. The increasing sophistication of attacks is blurring the lines between legitimate user behavior and impersonation attempts. The campaign we are exposing...
CVE-2025-31644
creationtimestamp| type| source ---|---|--- 2025-05-07 22:23:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15443 2025-05-07 23:30:25+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lomkcxrvqak2 2025-05-08 00:26:17+00:00| seen|...
Reevaluating SSEs: A Technical Gap Analysis of Last-Mile Protection
Security Service Edge SSE platforms have become the go-to architecture for securing hybrid work and SaaS access. They promise centralized enforcement, simplified connectivity, and consistent policy control across users and devices. But there's a problem: they stop short of where the most sensitiv...
AMD SMM Vulnerabilities February 2025 Security Update
AMD has informed HP of potential vulnerabilities identified in some AMD client platform firmware components, which might allow arbitrary code execution. AMD is releasing firmware updates to mitigate these vulnerabilities. AMD has released updates to mitigate the potential vulnerabilities. HP has...
CVE-2025-0649
creationtimestamp| type| source ---|---|--- 2025-05-06 21:16:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114462962265876830 2025-05-06 22:27:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lojwintqaq24 2025-05-07 00:14:11+00:00| seen|...
CVE-2025-27533
creationtimestamp| type| source ---|---|--- 2025-05-06 13:39:27+00:00| seen| https://seclists.org/oss-sec/2025/q2/105 2025-05-06 16:05:47+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lojb73h7i62v 2025-05-07 09:23:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15288...
WebKit Safari DoS
The vulnerability of the WebKit component in the Safari browser on operating systems macOS, iOS, iPadOS, tvOS, visionOS, and watchOS is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Security Advisory 0117
Security Advisory 0117 . CSAF PDF Date: May 6, 2025 Revision | Date | Changes ---|---|--- 1.0 | May 6, 2025 | Initial release 1.1 | May 20, 2025 | Updated affected Arista products Updated mitigation option 3 The CVE-ID tracking this issue: CVE-2025-0936 CVSSv3.1 Base Score: 6.5...
Exploit for Code Injection in Langflow
CVE-2025-3248 Langflow is a low-code platform primarily us...
CVE-2023-53144
In the Linux kernel, the following vulnerability has been resolved: erofs: fix wrong kunmap when using LZMA on HIGHMEM platforms As the call trace shown, the root cause is kunmap incorrect pages: BUG: kernel NULL pointer dereference, address: 00000000 CPU: 1 PID: 40 Comm: kworker/u5:0 Not tainted...
CVE-2023-53144
In the Linux kernel, the following vulnerability has been resolved: erofs: fix wrong kunmap when using LZMA on HIGHMEM platforms As the call trace shown, the root cause is kunmap incorrect pages: BUG: kernel NULL pointer dereference, address: 00000000 CPU: 1 PID: 40 Comm: kworker/u5:0 Not tainted...
CVE-2023-53144
CVE-2023-53144 concerns the Linux kernel erofs subsystem. The connected documentation describes an identified issue where kunmap could be applied to incorrect pages during LZMA decompression on HIGHMEM platforms, leading to a NULL pointer dereference in z_erofs_lzma_decompress and related call ch...