References https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-1879.html https://nvd.nist.gov/vuln/detail/CVE-2021-1879 https://advisories.checkpoint.com/defense/advisories/public/2021/cpai-2021-0481.html https://thehackernews.com/2021/06/apple-issues-urgent-patches-for-2-zero.html https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.jamf.com/blog/safari-zero-day-exploit-threat/ https://blog.google/threat-analysis-group/how-we-protect-users-0-day-attacks/ https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=33187 http://m.chinaaet.com/article/3000135208 https://cloud.tencent.com/developer/article/1987689 https://download.sangfor.com.cn/4f99ba8348cf48d8b9c9cd0bcb68b8a0.pdf https://bbs.kanxue.com/article-15976.htm
Related Vulnerabilities仁和兴业(深圳)软件有限公司仁和云ERP weChatAppletgetGoodsList.action 存在SSRF漏洞仁和兴业(深圳)软件有限公司仁和云ERP purchaseOrdersaveOrderApplet.action存在反序列化漏洞关于U8cloud所有版本u8capplet.jsp存在XSS漏洞的安全公告PoCCVE-2022-35413: WAPPLES Web Application Firewall <=6.0 - Hardcoded CredentialsPoCapple-cups-exposure: Apple CUPS Sources - ExposurePoCapplezeed-sqli: Applezeed - SQL InjectionPoCwapples-firewall-lfi: Wapples Web Application Firewall - Local File InclusionApple Filing Protocol(AFP) 未授权访问漏洞关于NC及NC Cloud系统的wsncapplet.jsp信息泄漏漏洞的安全通告Multiple Apple products CVE-2018-4222越界读取漏洞Apple Filing Protocol(AFP) 弱口令漏洞Apple多个产品条件竞争漏洞(CVE-2023-42974)Apple多个产品安全漏洞(CVE-2023-42950)