27 matches found
MAL-2026-8913 Malicious code in swaim5a (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
CVE-2026-8913
creationtimestamp| type| source ---|---|--- 2026-06-08 18:48:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116715942869524281 2026-06-08 20:14:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnsioef2o32j...
EUVD-2019-4833
Malware in sbrugna...
MAL-2025-8913 Malicious code in @malware-test-silex-oracy-grows-mened/test-mlw3-silex-oracy-grows-mened (npm)
The package @malware-test-silex-oracy-grows-mened/test-mlw3-silex-oracy-grows-mened was found to contain malicious code...
CVE-2025-8913
creationtimestamp| type| source ---|---|--- 2025-08-13 10:31:57+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwbmpbzjlv24 2025-08-13 12:49:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwbufv53vs2d...
CVE-2025-8913
CVE-2025-8913 concerns WellChoose’s Organization Portal System, which reportedly contains a Local File Inclusion vulnerability. Public documents describe unauthenticated remote attackers potentially able to execute arbitrary code on the server via LFI, but do not provide explicit affected version...
CVE-2024-8913
The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.6.11 via the render function in modules/widgets/tpaccordion.php. This makes it possibl...
CVE-2019-13328
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2020-8913
A local, arbitrary code execution vulnerability exists in the SplitCompat.install endpoint in Android's Play Core Library versions prior to 1.7.2. A malicious attacker could create an apk which targets a specific application, and if a victim were to install this apk, the attacker could perform a...
CVE-2024-8913
creationtimestamp| type| source ---|---|--- 2024-10-11 16:11:01+00:00| seen| https://t.me/cvedetector/7673...
CVE-2024-8913
CVE-2024-8913 affects The Plus Addons for Elementor (WordPress) up to version 5.6.11. The issue arises from the render function in modules/widgets/tp_accordion.php, enabling authenticated attackers with Contributor-level access and above to expose sensitive information (private, pending, and draf...
WordPress The Plus Addons for Elementor Page Builder Lite Plugin <= 5.6.11 is vulnerable to Sensitive Data Exposure
Software The Plus Addons for Elementor Page Builder Lite Type Plugin Vulnerable versions = 5.6.11 Fixed in 5.6.12 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-8913 Patch priority Low CVSS severity Low 6.5 Developer POSIMYTH Innovations PSID...
Several Unpatched Popular Android Apps Put Millions of Users at Risk of Hacking
A number of high-profile Android apps are still using an unpatched version of Google's widely-used app update library, potentially putting the personal data of hundreds of millions of smartphone users at risk of hacking. Many popular apps, including Grindr, Bumble, OkCupid, Cisco Teams, Moovit,...
CVE-2020-8913
creationtimestamp| type| source ---|---|--- 2020-08-28 15:12:10+00:00| seen| https://t.me/alexmakus/3624 2020-09-18 05:45:32+00:00| published-proof-of-concept| https://t.me/androidMalware/982 2020-11-04 17:37:16+00:00| published-proof-of-concept| https://t.me/informationsecuritychannel/41443...
CVE-2020-8913 Local arbitrary code execution in splitinstall in Android's Play Core
A local, arbitrary code execution vulnerability exists in the SplitCompat.install endpoint in Android's Play Core Library versions prior to 1.7.2. A malicious attacker could create an apk which targets a specific application, and if a victim were to install this apk, the attacker could perform a...
CVE-2020-8913
CVE-2020-8913 : A local arbitrary code execution vulnerability exists in Android’s Play Core Library (SplitCompat.install) for versions prior to 1.7.2. An attacker could craft an APK targeting a specific app; if installed, this could trigger a directory traversal and execute code with the targete...
CVE-2019-13328
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2019-13328
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2019-13328
CVE-2019-13328 is a Foxit Reader vulnerability affecting the AcroForm handling. The flaw is caused by not validating the existence of an object before performing operations on it within Acroform fields, enabling remote code execution when a user visits a malicious page or opens a crafted file. Af...