Vulnerabilidades de Shirt-pocket
CVEs publicadas que afetam produtos de Shirt-pocket: 4 registro(s), com severidade, exploração e correções.
CVE-2025-69604
Alta · 7.8
CWE-276 29/01/2026
Incorrect Default Permissions em Shirt-pocket Superduper!
An issue in Shirt Pocket's SuperDuper! 3.11 and earlier allow a local attacker to modify the default task template to install an arbitrary package that can run shell scripts with root privileges and Full Disk Access, thus bypassing macOS privacy controls.
CVE-2025-61229
Alta · 7.8
CWE-276 01/12/2025
Incorrect Default Permissions em Shirt-pocket Superduper!
An issue in Shirt Pocket's SuperDuper! 3.10 and earlier allow a local attacker to modify the default task template to execute an arbitrary preflight script with root privileges and Full Disk Access, thus bypassing macOS privacy controls.
CVE-2025-61228
Alta · 7.8
CWE-494 01/12/2025
Download of Code Without Integrity Check em Shirt-pocket Superduper!
An issue in Shirt Pocket SuperDuper! V.3.10 and before allows a local attacker to execute arbitrary code via the software update mechanism
CVE-2025-57489
Alta · 8.1
CWE-284 01/12/2025
Improper Access Control em Shirt-pocket Superduper!
Incorrect access control in the SDAgent component of Shirt Pocket SuperDuper! v3.10 allows attackers to escalate privileges to root due to the improper use of a setuid binary.