AirBorne Exploits: Zero-Click Wormable RCE Hits Apple & IoT Devices

AirBorne Exploits: Zero-Click Wormable RCE Hits Apple & IoT Devices

In a sweeping and deeply technical report, Oligo Security Research has disclosed a dangerous new family of vulnerabilities in Apple’s AirPlay protocol and its associated Software Development Kit (SDK) …
Read more

Published Date:
Apr 29, 2025 (4 hours, 4 minutes ago)

Vulnerabilities has been mentioned in this article.

Read More

CVE-2025-0716 – AngularJS SVG Image Content Spoofing

CVE ID : CVE-2025-0716

Published : April 29, 2025, 5:15 p.m. | 1 hour, 52 minutes ago

Description : Improper sanitization of the value of the ‘href’ and ‘xlink:href’ attributes in ” SVG elements in AngularJS allows attackers to bypass common image source restrictions. This can lead to a form of Content Spoofing https://owasp.org/www-community/attacks/Content_Spoofing  and also negatively affect the application’s performance and behavior by using too large or slow-to-load images.

This issue affects all versions of AngularJS.

Note:
The AngularJS project is End-of-Life and will not receive any updates to address this issue. For more information see here https://docs.angularjs.org/misc/version-support-status .

Severity: 4.8 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Read More