Apple Security Advisory 2021-04-26-10 – Xcode 12.5 addresses an arbitrary code execution vulnerability.
Trojan-Dropper.Win32.Dycler.vrp malware suffers from an insecure permissions vulnerability.
Trojan-Dropper.Win32.Injector.aobl malware suffers from an insecure permissions vulnerability.
Kirby CMS version 3.5.3.1 suffers from a cross site scripting vulnerability.
Backdoor.Win32.Agent.afq malware suffers from a missing authentication vulnerability.
Release functionality on GitHub.com allows modification of assets within a release by any project collaborator. This can occur after the release is published, and without notification or audit logging accessible…
Backdoor.Win32.Agent.afq malware suffers from a directory traversal vulnerability.
Backdoor.Win32.Agent.afq malware suffers from a heap corruption vulnerability.
Android suffers from an out-of-bounds write in the NFC stack when handling MIFARE Classic TLVs.
PFSense version 2.5.0 suffers from a persistent cross site scripting vulnerability.