35504 matches found
CVE-2026-8029 SQL Injection Vulnerability in ZTE SmartLife App
The ZTE Smart Life app contains an SQL injection vulnerability that allows attackers to execute UNION SELECT statements to query sensitive data in the feedback.db database across tables, including user accounts, phone numbers, feedback content, and local debug log paths, thereby enabling the thef...
CVE-2026-71214
creationtimestamp| type| source ---|---|--- 2026-08-05 07:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117041727081914237 2026-08-05 07:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mscyzgcese2v 2026-08-05 09:24:05+00:00| seen|...
CVE-2026-9273
creationtimestamp| type| source ---|---|--- 2026-08-05 06:00:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/117041373701599609 2026-08-05 06:00:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msctyppdsc2t 2026-08-05 07:04:04+00:00| seen|...
[SECURITY] Fedora 44 Update: perl-PAR-Packer-1.064-6.fc44
This module implements the App::Packer::Backend interface, for generating stand-alone executables, perl scripts and PAR files...
Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751
Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751 The information on this page is being provided to you on an "AS IS" and "AS-AVAILABLE" basis. The issues described on this page may or may not impact your systems. Cloud Software Group, Inc. and its subsidiaries collectively, "Clou...
EUVD-2026-53009
A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...
CVE-2026-18853
A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...
CVE-2026-8029: Improper Neutralization of Special Elements used in an SQL Command
The ZTE Smart Life app contains an SQL injection vulnerability that allows attackers to execute UNION SELECT statements to query sensitive data in the feedback.db database across tables, including user accounts, phone numbers, feedback content, and local debug log paths, thereby enabling the thef...
CVE-2026-9190: Inconsistent Interpretation of HTTP Requests
An HTTP request smuggling vulnerability in the HTTP App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker to bypass authentication and authorization checks, hijack a legitimate user's session, or capture credentials. The vulnerability occurs when a crafted HTTP...
CVE-2025-63822
The SirenGPS Android Application 2.19.44 is vulnerable to Incorrect Access Control . An authenticated attacker can manipulate user identifier parameters to bypass authorization controls, as the API fails to validate if the requesting user is authorized to access the target user's data. This flaw ...
CVE-2025-63823
The My Safetipin Android Application 5.2.1 is affected by CVE-2025-63823 , which involves hardcoded credentials within the authentication module. This flaw allows remote attackers to bypass authentication and gain unauthorized access to user accounts by leveraging predictable OTP values . No spec...
CVE-2026-18853: Improper Limitation of a Pathname to a Restricted Directory
A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...
PT-2026-68219
Name of the Vulnerable Software and Affected Versions Progress MarkLogic Server versions prior to 11.3.6 Progress MarkLogic Server versions prior to 12.0.3 Description An authentication bypass exists in the ODBC App Server. This flaw allows an unauthenticated remote attacker to circumvent passwor...
CVE-2026-9192: Improper Authentication
An authentication bypass vulnerability in the ODBC App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote attacker to bypass password verification and execute queries with the privileges of any named user known to the server, including administrators...
CVE-2025-63823
My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication module, which allows remote attackers to bypass authentication and gain unauthorized access to user accounts via predictable OTP values...
CVE-2025-63822
SirenGPS Android Application 2.19.44 is vulnerable to Incorrect Access Control. An authenticated attacker can manipulate user identifier parameters to bypass authorization controls and gain unauthorized READ and WRITE access to other users' personal information. The API fails to validate that the...
CVE-2026-18853 ZomboDroid Meme Generator App com.zombodroid.MemeGenerator t5.l.c path traversal
A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...
CVE-2026-18853
A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...
CVE-2026-18853
CVE-2026-18853 affects ZomboDroid Meme Generator App for Android (version 4.6830) through the function t5.l.c of component com.zombodroid.MemeGenerator, enabling path traversal. Local access is required. The exploit has been publicly disclosed, and the vendor has not responded to the disclosure. ...
CVE-2026-18853 ZomboDroid Meme Generator App com.zombodroid.MemeGenerator t5.l.c path traversal
A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...