EUVD-2025-31487

Malicious code in bioql PyPI...

CVE-2025-11130

A weakness has been identified in iHongRen pptp-vpn 1.0/1.0.1 on macOS. This issue affects the function shouldAcceptNewConnection of the file HelpTool/HelperTool.m of the component XPC Service. This manipulation causes missing authentication. The attack can only be executed locally. The exploit h...

CVE-2025-11130 iHongRen pptp-vpn XPC Service HelperTool.m shouldAcceptNewConnection missing authentication

A weakness has been identified in iHongRen pptp-vpn 1.0/1.0.1 on macOS. This issue affects the function shouldAcceptNewConnection of the file HelpTool/HelperTool.m of the component XPC Service. This manipulation causes missing authentication. The attack can only be executed locally. The exploit h...

pptp-vpn 访问控制错误漏洞

pptp-vpn is a VPN client for iHongRen Personal Developer. An access control error vulnerability exists in pptp-vpn version 1.0 and 1.0.1. The vulnerability stems from a lack of authentication in the function shouldAcceptNewConnection in the file HelpTool/HelperTool.m in the XPC Service component,...

CVE-2025-8533: Incorrect Authorization

A vulnerability was identified in the XPC services of Fantastical. The services failed to implement proper client authorization checks in its listener:shouldAcceptNewConnection method, unconditionally accepting requests from any local process. As a result, any local, unprivileged process could...

PT-2025-5841 · Apphousekitchen · Apphousekitchen Aldente Charge Limiter

Name of the Vulnerable Software and Affected Versions: AppHouseKitchen AlDente Charge Limiter versions up to 1.29 Description: A critical issue has been found in AppHouseKitchen AlDente Charge Limiter, affecting the shouldAcceptNewConnection function of the com.apphousekitchen.aldente-pro.helper...

Adobe Downloader 安全漏洞

Adobe Downloader is a macOS Adobe application downloader and installer for X1a0He individual developers. A security vulnerability exists in Adobe Downloader version 1.3.1 and prior versions, which stems from the shouldAcceptNewConnection function of the XPC Service component contains a rights...

PT-2024-17736 · Unknown · X1A0He Adobe Downloader

Name of the Vulnerable Software and Affected Versions: X1a0He Adobe Downloader version 1.3.1 and earlier Description: A critical vulnerability was found in the X1a0He Adobe Downloader, affecting the shouldAcceptNewConnection function of the com.x1a0he.macOS.Adobe-Downloader.helper file in the XPC...