Posted by Andrey Stoykov on Sep 16
# Exploit Title: Stored XSS to Account Takeover – htmlyv2.9.9
# Date: 9/2024
# Exploit Author: Andrey Stoykov
# Version: 2.9.9
# Tested on: Ubuntu 22.04
# Blog:
https://msecureltd.blogspot.com/2024/08/friday-fun-pentest-series-9-stored-xss.html
Description:
– It was found that the application suffers from stored XSS
– Low level user having an “author” role can takeover admin account and
change their password via posting a malicious…
Posted by Apple Product Security via Fulldisclosure on Sep 16
APPLE-SA-09-16-2024-10 macOS Ventura 13.7
macOS Ventura 13.7 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/121234.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
Accounts
Available for: macOS Ventura
Impact: An app may be able to leak sensitive user information
Description: The…
Posted by Apple Product Security via Fulldisclosure on Sep 16
APPLE-SA-09-16-2024-9 macOS Sonoma 14.7
macOS Sonoma 14.7 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/121247.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
Accounts
Available for: macOS Sonoma
Impact: An app may be able to access user-sensitive data
Description: The issue was…
Posted by Apple Product Security via Fulldisclosure on Sep 16
APPLE-SA-09-16-2024-8 iOS 17.7 and iPadOS 17.7
iOS 17.7 and iPadOS 17.7 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/121246.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
Accessibility
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch
2nd generation and…
Posted by Apple Product Security via Fulldisclosure on Sep 16
APPLE-SA-09-16-2024-7 Xcode 16
Xcode 16 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/121239.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
IDE Documentation
Available for: macOS Sonoma 14.5 and later
Impact: A malicious application may gain access to a user’s Keychain
items…
Posted by Apple Product Security via Fulldisclosure on Sep 16
APPLE-SA-09-16-2024-6 Safari 18
Safari 18 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/121241.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
WebKit
Available for: macOS Ventura and macOS Sonoma
Impact: Visiting a malicious website may lead to address bar spoofing
Description: The…
Posted by Apple Product Security via Fulldisclosure on Sep 16
APPLE-SA-09-16-2024-5 visionOS 2
visionOS 2 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/121249.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
APFS
Available for: Apple Vision Pro
Impact: A malicious app with root privileges may be able to modify the
contents of system files…
Posted by Apple Product Security via Fulldisclosure on Sep 16
APPLE-SA-09-16-2024-4 watchOS 11
watchOS 11 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/121240.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
Accessibility
Available for: Apple Watch Series 6 and later
Impact: An attacker with physical access to a locked device may be able
to…
Posted by Apple Product Security via Fulldisclosure on Sep 16
APPLE-SA-09-16-2024-3 tvOS 18
tvOS 18 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/121248.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
Game Center
Available for: Apple TV HD and Apple TV 4K (all models)
Impact: An app may be able to access user-sensitive data
Description: A file…
Posted by Apple Product Security via Fulldisclosure on Sep 16
APPLE-SA-09-16-2024-2 macOS Sequoia 15
macOS Sequoia 15 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/121238.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
Accounts
Available for: Mac Studio (2022 and later), iMac (2019 and later), Mac
Pro (2019 and later), Mac Mini (2018 and…
News, Advisories and much more