Security Advisories

The Apple Music application for Windows is vulnerable to arbitrary JavaScript execution through the manipulation of content displayed in the application. This could allow an attacker to execute arbitrary code in the context of the application.

The Pexip Infinity Connect client contains a vulnerability that allows arbitrary JavaScript execution through the application’s interface. This could potentially allow an attacker to execute malicious code in the context of the application.

Maltego contains an XML external entity (XXE) injection vulnerability that could allow an attacker to read arbitrary files on the system, conduct server-side request forgery (SSRF) attacks, or cause denial of service.

KDE Ark contains a vulnerability that allows directory traversal and command execution through specially crafted archive files. An attacker could create a malicious archive that, when extracted, could traverse directories and execute arbitrary commands.