#apple

A binary in Apple macOS could allow an adversary to execute an arbitrary binary that bypasses SIP.

AccPack Khanepani version 1.0 suffers from an insecure direct object reference vulnerability.

Apple has released security updates that patch vulnerabilities in Siri and VoiceOver that could be used to access sensitive user data.

With sufficient privileges in Active Directory, attackers only have to create an "ESX Admins" group in the targeted domain and add a user to it.

Apple Security Advisory 07-29-2024-9 - visionOS 1.3 addresses bypass, information leakage, integer overflow, out of bounds access, out of bounds read, and use-after-free vulnerabilities.

Apple Security Advisory 07-29-2024-8 - tvOS 17.6 addresses bypass, information leakage, integer overflow, out of bounds access, out of bounds read, and use-after-free vulnerabilities.

Apple Security Advisory 07-29-2024-7 - watchOS 10.6 addresses bypass, information leakage, integer overflow, out of bounds access, out of bounds read, and use-after-free vulnerabilities.

Chuksrio LMS version 2.9 suffers from an insecure direct object reference vulnerability.

QuickJob version 6.1 suffers from an ignored default credential vulnerability.

Prison Management System version version 1.0 suffers from an ignored default credential vulnerability.