[remote] iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter

iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter

[webapps] RosarioSIS 6.7.2 - Cross-Site Scripting (XSS)

RosarioSIS 6.7.2 - Cross-Site Scripting (XSS)

[webapps] RosarioSIS 6.7.2 - Cross Site Scripting (XSS)

RosarioSIS 6.7.2 - Cross Site Scripting (XSS)

[remote] FortiOS SSL-VPN 7.4.4 - Insufficient Session Expiration & Cookie Reuse

FortiOS SSL-VPN 7.4.4 - Insufficient Session Expiration & Cookie Reuse

[remote] AirKeyboard iOS App 1.0.5 - Remote Input Injection

AirKeyboard iOS App 1.0.5 - Remote Input Injection

[local] macOS LaunchDaemon iOS 17.2 - Privilege Escalation

macOS LaunchDaemon iOS 17.2 - Privilege Escalation

[remote] Fortinet FortiOS, FortiProxy, and FortiSwitchManager 7.2.0 - Authentication bypass

Fortinet FortiOS, FortiProxy, and FortiSwitchManager 7.2.0 - Authentication bypass

[webapps] Nagios Log Server 2024R1.3.1 - API Key Exposure

Nagios Log Server 2024R1.3.1 - API Key Exposure

[webapps] RosarioSIS 7.6 - SQL Injection

RosarioSIS 7.6 - SQL Injection

[webapps] Nagios Xi 5.6.6 - Authenticated Remote Code Execution (RCE)

Nagios Xi 5.6.6 - Authenticated Remote Code Execution (RCE)

[webapps] Nagios Log Server 2024R1.3.1 - Stored XSS

Nagios Log Server 2024R1.3.1 - Stored XSS

#0daytoday #MacOS CoreAudio Framework Sandbox Escape Exploit CVE-2024-54529 [remote #exploits #0day #Exploit]

AppleAVD AV1_Syntax::Parse_Header Out-Of-Bounds Reads

AppleAVD has an issue where a large OBU size in AV1_Syntax::Parse_Header reading can lead to out-of-bounds reads.

AppleAVD AV1_Syntax::f Out-Of-Bounds Reads

AppleAVD has an issue in AV1_Syntax::f leading to out-of-bounds reads.

AppleAVD AV1_Syntax::Parse_Header Integer Underflow / Out-Of-Bounds Reads

AppleAVD has an integer underflow in AV1_Syntax::Parse_Header that can lead to out-of-bounds reads.

#0daytoday #Apple iOS 17.2.1 Screen Time Passcode Retrieval / Mitigation Bypass Vulnerabilities [#0day #Exploit]

FortiOS Path Traversal Credential Gatherer

Fortinet FortiOS versions 5.4.6 to 5.4.12, 5.6.3 to 5.6.7 and 6.0.0 to 6.0.4 are vulnerable to a path traversal vulnerability within the

Surface Pro 3 BIOS False Health Attestation / TPM Carte Blanche

On Surface Pro 3 with the SHA1 and SHA256 PCRs enabled on the TPM, BIOS version 3.11.2550 and earlier, only the SHA1 PCRs are extended by

#0daytoday #Nagios XI Version 2024R1.01 - SQL Injection Exploit [webapps #exploits #0day #Exploit]

Nagios XI 2024R1.01 SQL Injection

Nagios XI versions 2024R1.01 suffers from a remote SQL injection vulnerability.

[webapps] Nagios XI Version 2024R1.01 - SQL Injection

Nagios XI Version 2024R1.01 - SQL Injection

One Identity Password Manager Kiosk Escape Privilege Escalation

One Identity Password Manager versions prior to 5.13.1 suffer from a kiosk escape privilege escalation vulnerability.

0-Day In Cisco IOS XE Software Is Under Attack

Apple Fixes Overheating And Zero Day Flaws With New iOS Update

Cisco Warns Of IOS Software Zero-Day Exploitation Attempts

Incomplete Disclosures By Apple And Google Create Huge Blindspot For 0-Day Hunters

Google Patches Chrome 0-Day Reported By Apple, Spyware Hunters

It's A Hot 0-Day Summer For Apple, Google, And Microsoft Security Fixes

Apple Zeed ALL YOUR STYLE CMS 1.00 SQL Injection

Apple Zeed ALL YOUR STYLE CMS version 1.00 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Telegram On macOS TCC Bypass

This article focuses on a weakness in the Telegram application on macOS that allows for the injection of a Dynamic Library (or Dylib for

Lilac-Reloaded For Nagios 2.0.8 Remote Code Execution

Topic: Lilac-Reloaded For Nagios 2.0.8 Remote Code Execution Risk: High Text:#!/usr/bin/env python """ # Exploit Title: Lilac-Reloaded

[webapps] Lilac-Reloaded for Nagios 2.0.8 - Remote Code Execution (RCE)

Lilac-Reloaded for Nagios 2.0.8 - Remote Code Execution (RCE)

[local] Google Chrome Browser 111.0.5563.64 - AXPlatformNodeCocoa Fatal OOM/Crash (macOS)

Google Chrome Browser 111.0.5563.64 - AXPlatformNodeCocoa Fatal OOM/Crash (macOS)

QuaDream Apple Spyware Maker Just Popped Up On The Radar Again

#0daytoday #Suprema BioStar 2 v2.8.16 - SQL Injection Vulnerability CVE-2023-27167 [webapps #exploits #Vulnerability #0day #Exploit]

[webapps] Suprema BioStar 2 v2.8.16 - SQL Injection

Suprema BioStar 2 v2.8.16 - SQL Injection