apple多个产品越界写入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.cnvd.org.cn/flaw/show/CNVD-2025-19354
• https://support.apple.com/zh-cn/103006
• https://www.cls.cn/detail/2140777
• https://zone.ci/aliyun/ali_nvd/106612.html
• https://nic.seu.edu.cn/info/1047/1358.htm
• https://support.apple.com/zh-cn/122283
• https://www.51cto.com/article/810678.html
• https://www.secrss.com/articles/46085
• https://www.hkcert.org/tc/security-bulletin/apple-products-multiple-vulnerabilities_20251215
• https://nvd.nist.gov/vuln/detail/CVE-2025-24201
• https://support.apple.com/zh-cn/125330
• https://news.zol.com.cn/1044/10448371.html
• https://www.secrss.com/articles/82347
• https://www.anquanke.com/post/id/306096

Related Vulnerabilities

• 仁和兴业（深圳）软件有限公司仁和云ERP weChatAppletgetGoodsList.action 存在SSRF漏洞
• 仁和兴业（深圳）软件有限公司仁和云ERP purchaseOrdersaveOrderApplet.action存在反序列化漏洞
• 关于U8cloud所有版本u8capplet.jsp存在XSS漏洞的安全公告
• PoCCVE-2022-35413: WAPPLES Web Application Firewall <=6.0 - Hardcoded Credentials
• PoCapple-cups-exposure: Apple CUPS Sources - Exposure
• PoCapplezeed-sqli: Applezeed - SQL Injection
• PoCwapples-firewall-lfi: Wapples Web Application Firewall - Local File Inclusion
• Apple Filing Protocol(AFP) 未授权访问漏洞
• 关于NC及NC Cloud系统的wsncapplet.jsp信息泄漏漏洞的安全通告
• Multiple Apple products CVE-2018-4222越界读取漏洞
• Apple Filing Protocol(AFP) 弱口令漏洞
• Apple Webkit CVE-2021-1879 释放后重利用漏洞
• Apple多个产品条件竞争漏洞(CVE-2023-42974)