Read Time:8 Second
It was discovered that urllib3 didn’t strip HTTP Proxy-Authorization header
on cross-origin redirects. A remote attacker could possibly use this issue
to obtain sensitive information.
Category Archives: Advisories
USN-7064-2: nano vulnerability
Read Time:19 Second
USN-7064-1 fixed a vulnerability in nano. This update provides the
corresponding update for Ubuntu 14.04 LTS.
Original advisory details:
It was discovered that nano allowed a possible privilege escalation
through an insecure temporary file. If nano was killed while editing, the
permissions granted to the emergency save file could be used by an
attacker to escalate privileges using a malicious symlink.
SEC Consult SA-20241023-0 :: Authenticated Remote Code Execution in Multiple Xerox printers (CVE-2024-6333)
Read Time:15 Second
Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Oct 28
SEC Consult Vulnerability Lab Security Advisory < 20241023-0 >
=======================================================================
title: Authenticated Remote Code Execution
product: Multiple Xerox printers
(EC80xx, AltaLink, VersaLink, WorkCentre)
vulnerable version: see vulnerable versions below
fixed version: see solution section below
CVE number: CVE-2024-6333…
APPLE-SA-10-28-2024-8 visionOS 2.1
Read Time:24 Second
Posted by Apple Product Security via Fulldisclosure on Oct 28
APPLE-SA-10-28-2024-8 visionOS 2.1
visionOS 2.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/121566.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
App Support
Available for: Apple Vision Pro
Impact: A malicious app may be able to run arbitrary shortcuts without
user consent…
APPLE-SA-10-28-2024-7 tvOS 18.1
Read Time:26 Second
Posted by Apple Product Security via Fulldisclosure on Oct 28
APPLE-SA-10-28-2024-7 tvOS 18.1
tvOS 18.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/121569.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
App Support
Available for: Apple TV HD and Apple TV 4K (all models)
Impact: A malicious app may be able to run arbitrary shortcuts without…
APPLE-SA-10-28-2024-6 watchOS 11.1
Read Time:25 Second
Posted by Apple Product Security via Fulldisclosure on Oct 28
APPLE-SA-10-28-2024-6 watchOS 11.1
watchOS 11.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/121565.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
Accessibility
Available for: Apple Watch Series 6 and later
Impact: An attacker with physical access to a locked device may be able
to…
APPLE-SA-10-28-2024-5 macOS Ventura 13.7.1
Read Time:25 Second
Posted by Apple Product Security via Fulldisclosure on Oct 28
APPLE-SA-10-28-2024-5 macOS Ventura 13.7.1
macOS Ventura 13.7.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/121568.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
App Support
Available for: macOS Ventura
Impact: A malicious app may be able to run arbitrary shortcuts without
user…
APPLE-SA-10-28-2024-4 macOS Sonoma 14.7.1
Read Time:25 Second
Posted by Apple Product Security via Fulldisclosure on Oct 28
APPLE-SA-10-28-2024-4 macOS Sonoma 14.7.1
macOS Sonoma 14.7.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/121570.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
App Support
Available for: macOS Sonoma
Impact: A malicious app may be able to run arbitrary shortcuts without
user…
APPLE-SA-10-28-2024-3 macOS Sequoia 15.1
Read Time:24 Second
Posted by Apple Product Security via Fulldisclosure on Oct 28
APPLE-SA-10-28-2024-3 macOS Sequoia 15.1
macOS Sequoia 15.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/121564.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
Apache
Impact: Multiple issues existed in Apache
Description: This is a vulnerability in open source code and Apple…
APPLE-SA-10-28-2024-2 iOS 17.7.1 and iPadOS 17.7.1
Read Time:27 Second
Posted by Apple Product Security via Fulldisclosure on Oct 28
APPLE-SA-10-28-2024-2 iOS 17.7.1 and iPadOS 17.7.1
iOS 17.7.1 and iPadOS 17.7.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/121567.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
Accessibility
Available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch
2nd generation…