2598 matches found
CVE-2024-44246
The issue was addressed with improved routing of Safari-originated requests. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2. On a device with Private Relay enabled, adding a website to the Safari Reading List may reveal the originating IP address t...
CVE-2024-44246
The issue was addressed with improved routing of Safari-originated requests. This issue is fixed in macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, Safari 18.2, iPadOS 17.7.3. On a device with Private Relay enabled, adding a website to the Safari Reading List may reveal the originating IP address t...
CVE-2024-44246
CVE-2024-44246 concerns the risk that, on devices with Private Relay enabled, adding a website to the Safari Reading List could reveal the user’s originating IP address to that site. The issue is resolved by Apple’s routing improvements in Safari and macOS/iOS/iPadOS updates: macOS Sequoia 15.2, ...
CVE-2024-44246
The issue was addressed with improved routing of Safari-originated requests. This issue is fixed in macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, Safari 18.2, iPadOS 17.7.3. On a device with Private Relay enabled, adding a website to the Safari Reading List may reveal the originating IP address t...
CVE-2024-44246
The issue was addressed with improved routing of Safari-originated requests. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2. On a device with Private Relay enabled, adding a website to the Safari Reading List may reveal the originating IP address t...
PT-2024-31073 · Apple · Ios +4
Name of the Vulnerable Software and Affected Versions: macOS Sequoia versions prior to 15.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 Safari versions prior to 18.2 iPadOS versions prior to 17.7.3 Description: The issue was addressed with improved routing of Safari-originated...
About the security content of Safari18.2
About the security content of Safari18.2 This document describes the security content of Safari 18.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
CVE-2023-48274
Missing Authorization vulnerability in Mondial Relay WooCommerce - WCMultiShipping WCMultiShipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCMultiShipping: from n/a through 2.3.5...
Mitigating NTLM Relay Attacks by Default
Introduction In February 2024, we released an update to Exchange Server which contained a security improvement referenced by CVE-2024-21410 that enabled Extended Protection for Authentication EPA by default for new and existing installs of Exchange 2019. While we’re currently unaware of any activ...
CVE-2024-55563
Bitcoin Core through 27.2 allows transaction-relay jamming via an off-chain protocol attack, a related issue to CVE-2024-52913. For example, the outcome of an HTLC Hashed Timelock Contract can be changed because a flood of transaction traffic prevents propagation of certain Lightning channel...
CVE-2024-55563
Bitcoin Core through 27.2 allows transaction-relay jamming via an off-chain protocol attack, a related issue to CVE-2024-52913. For example, the outcome of an HTLC Hashed Timelock Contract can be changed because a flood of transaction traffic prevents propagation of certain Lightning channel...
CVE-2024-55563
CVE-2024-55563 affects Bitcoin Core up to version 27.2, enabling a transaction-relay jamming/off‑chain protocol attack that can cause certain Lightning channel HTLC transactions to be blocked or their outcomes changed when a flood of transaction traffic prevents propagation. The issue is related ...
CVE-2024-55563
Bitcoin Core through 27.2 allows transaction-relay jamming via an off-chain protocol attack, a related issue to CVE-2024-52913. For example, the outcome of an HTLC Hashed Timelock Contract can be changed because a flood of transaction traffic prevents propagation of certain Lightning channel...
PT-2024-13568 · Woocommerce · Mondial Relay Woocommerce - Wcmultishipping
Name of the Vulnerable Software and Affected Versions: Mondial Relay WooCommerce - WCMultiShipping versions through 2.3.5 Description: The issue affects the WCMultiShipping plugin due to missing authorization, allowing exploitation of incorrectly configured access control security levels...
Bitcoin Core 安全漏洞
Bitcoin Core is a Bitcoin open source client for verifying the validity of blockchain transactions. A security vulnerability exists in Bitcoin Core 27.2 and earlier versions that stems from allowing transaction relay blocking via an offline protocol attack...
ESC8 Relay: SMB to HTTP(S)
This module creates an SMB server and then relays the credentials passed to it to an HTTP server to gain an authenticated connection. Once that connection is established, the module makes an authenticated request for a certificate based on a given template. Module Options msf use...
OESA-2024-2308 python-jupyter-server security update
The backend for Jupyter web applications Security Fixes: The Jupyter Server provides the backend for Jupyter web applications. Jupyter Server on Windows has a vulnerability that lets unauthenticated attackers leak the NTLMv2 password hash of the Windows user running the Jupyter server. An attacke...
Security Flaw in Styra's OPA Exposes NTLM Hashes to Remote Attackers
Details have emerged about a now-patched security flaw in Styra's Open Policy Agent OPA that, if successfully exploited, could have led to leakage of New Technology LAN Manager NTLM hashes. "The vulnerability could have allowed an attacker to leak the NTLM credentials of the OPA server's local us...
Adobe Dreamweaver 18.0.0 < 18.2.1 / 19.0 < 19.1 Sensitive data disclosure if SMB request is subject to a relay attack (APSB19-21) (macOS)
The version of Adobe Dreamweaver installed on the remote macOS host is prior to 18.2.1, 19.1. It is, therefore, affected by a vulnerability as referenced in the APSB19-21 advisory. - Adobe Dreamweaver versions 19.0 and earlier have an insecure protocol implementation vulnerability. Successful...
