Lucene search
+L

76 matches found

Kitploit
Kitploit
added 2026/09/06 1:01 p.m.6 views

XPRTestSuite

Suite de tests XProtect Remediator Un ensemble de scripts et de documents pour aider les futures recherches sur XProtect Remediator XPR, présenté au Black Hat USA 2025 À propos de ce dépôt Ce dépôt contient : Les scripts pour créer des fichiers et processus minimaux inoffensifs qui reproduisent l...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/01 4:59 p.m.6 views

macos_xprotect

Введение в macOS - XProtect Продолжая мою серию постов о введении в macOS, я решил посвятить короткий пост XProtect. Что такое XProtect? XProtect — это встроенная антивирусная система macOS и система сигнатур вредоносных программ от Apple. Она работает как часть XProtectService, которая сканирует...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/01 2:05 p.m.2 views

Ph-n-t-ch-CVE-2024-40842-XProtectRemediatorDubRobber-Information-Leak-tr-n-macOS

CVE-2024-40842: Fuite d'informations XProtectRemediatorDubRobber sur macOS Aperçu CVE-2024-40842 est une vulnérabilité de fuite d'informations locale dans XProtect Remediator de macOS, liée au module : XProtectRemediatorDubRobber La vulnérabilité provient du traitement non sécurisé de la variable...

5.5CVSS5.9AI score0.00231EPSS
SaveExploits0
NVD
NVD
added 2026/07/14 10:16 a.m.23 views

CVE-2026-3014

Milestone has released a new version of XProtect® and several cumulative patch updates which fix security vulnerability in Management Server API. The vulnerability causes users with edit permissions to the Management Server to be able to execute arbitrary code in context of the Management Server...

9.1CVSS0.00782EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/14 9:45 a.m.18 views

EUVD-2026-43655

Milestone has released a new version of XProtect® and several cumulative patch updates which fix security vulnerability in Management Server API. The vulnerability causes users with edit permissions to the Management Server to be able to execute arbitrary code in context of the Management Server...

9.1CVSS6.2AI score0.00782EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/14 9:45 a.m.14 views

CVE-2026-3014

Milestone has released a new version of XProtect® and several cumulative patch updates which fix security vulnerability in Management Server API. The vulnerability causes users with edit permissions to the Management Server to be able to execute arbitrary code in context of the Management Server...

9.1CVSS6.2AI score0.00782EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/07/14 9:45 a.m.14 views

CVE-2026-3014 Remote Code Execution by administrative user on the Management Server

Milestone has released a new version of XProtect® and several cumulative patch updates which fix security vulnerability in Management Server API. The vulnerability causes users with edit permissions to the Management Server to be able to execute arbitrary code in context of the Management Server...

9.1CVSS6.2AI score0.00782EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/14 9:45 a.m.46 views

CVE-2026-3014

CVE-2026-3014 concerns Milestone XProtect. A vulnerability in the Management Server API could allow users with edit permissions on the Management Server to execute arbitrary code in the context of the Management Server Service. Milestone has released a new version of XProtect with cumulative patc...

9.1CVSS6.2AI score0.00782EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.21 views

PT-2026-58002

Milestone has released a new version of XProtect® and several cumulative patch updates which fix security vulnerability in Management Server API. The vulnerability causes users with edit permissions to the Management Server to be able to execute arbitrary code in context of the Management Server...

9.1CVSS6.2AI score0.00782EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/03/27 10:51 p.m.17 views

CVE-2026-33631

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the 4.1 branch and earlier, the opfilter Endpoint Security system extension enforced file access policy exclusively by intercepting ESEVENTTYPEAUTHOPEN events. Seven additional file...

8.7CVSS5.9AI score0.00101EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/26 8:16 p.m.11 views

CVE-2026-33631

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the 4.1 branch and earlier, the opfilter Endpoint Security system extension enforced file access policy exclusively by intercepting ESEVENTTYPEAUTHOPEN events. Seven additional file...

8.7CVSS0.00101EPSS
SaveExploits0References2
CVE
CVE
added 2026/03/26 7:30 p.m.21 views

CVE-2026-33631

CVE-2026-33631 affects ClearanceKit on macOS. In the 4.1 branch and earlier, the opfilter Endpoint Security system extension enforced file access policy only for ES_EVENT_TYPE_AUTH_OPEN; seven additional file operation events were not intercepted, allowing local processes to bypass FAA policy wit...

8.7CVSS5.8AI score0.00101EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/03/26 7:30 p.m.10 views

CVE-2026-33631 ClearanceKit: opfilter policy bypass via non-open file operations

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the 4.1 branch and earlier, the opfilter Endpoint Security system extension enforced file access policy exclusively by intercepting ESEVENTTYPEAUTHOPEN events. Seven additional file...

8.7CVSS6AI score
SaveExploits0References4
EUVD
EUVD
added 2026/03/26 7:30 p.m.19 views

EUVD-2026-16371

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the 4.1 branch and earlier, the opfilter Endpoint Security system extension enforced file access policy exclusively by intercepting ESEVENTTYPEAUTHOPEN events. Seven additional file...

8.7CVSS5.8AI score0.00101EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/26 7:30 p.m.4 views

CVE-2026-33631

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the 4.1 branch and earlier, the opfilter Endpoint Security system extension enforced file access policy exclusively by intercepting ESEVENTTYPEAUTHOPEN events. Seven additional file...

8.7CVSS5.8AI score0.00101EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/26 7:30 p.m.3 views

CVE-2026-33631 ClearanceKit: opfilter policy bypass via non-open file operations

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the 4.1 branch and earlier, the opfilter Endpoint Security system extension enforced file access policy exclusively by intercepting ESEVENTTYPEAUTHOPEN events. Seven additional file...

8.7CVSS5.9AI score0.00101EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/03/26 7:30 p.m.33 views

CVE-2026-33631 ClearanceKit: opfilter policy bypass via non-open file operations

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the 4.1 branch and earlier, the opfilter Endpoint Security system extension enforced file access policy exclusively by intercepting ESEVENTTYPEAUTHOPEN events. Seven additional file...

8.7CVSS0.00101EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/26 12:00 a.m.12 views

PT-2026-28500

Name of the Vulnerable Software and Affected Versions ClearanceKit versions 4.1 and earlier Description ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the 4.1 branch and earlier, the opfilter Endpoint Security system extension...

8.7CVSS5.9AI score0.00101EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/12/17 11:03 a.m.25 views

CVE-2025-0836

Missing Authorization vulnerability in Milestone Systems XProtect VMS allows users with read-only access to Management Server to have full read/write access to MIP Webhooks API...

6.3CVSS6.9AI score0.00208EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/16 11:15 a.m.13 views

CVE-2025-0836

Missing Authorization vulnerability in Milestone Systems XProtect VMS allows users with read-only access to Management Server to have full read/write access to MIP Webhooks API...

6.3CVSS0.00208EPSS
SaveExploits0References2
Rows per page
Query Builder