CVE-2023-24010

creationtimestamp| type| source ---|---|--- 2025-01-09 14:40:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113798913106504782 2025-01-09 15:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcxtqtlio25 2025-01-09 15:38:35+00:00| seen|...

CVE-2022-22491

creationtimestamp| type| source ---|---|--- 2025-01-09 14:12:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113798805158983707 2025-01-09 14:15:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/953 2025-01-09 14:15:46+00:00| seen|...

GHSA-58MG-WW7Q-XW3P

creationtimestamp| type| source ---|---|--- 2025-01-08 20:22:12+00:00| seen| https://bsky.app/profile/Kubernetes.activitypub.awakari.com.ap.brid.gy/post/3lfayiptjt662...

Malicious code in cursor-always-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 614a7726e7b2899695d56d3b75f1f9179a6fcde5654913693b20e521e476840f The OpenSSF Package Analysis project identified 'cursor-always-local' @ 1.0.2 npm as malicious. It is considered malicious because: - The packag...

CVE-2024-12849

creationtimestamp| type| source ---|---|--- 2025-01-07 05:38:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/343 2025-01-07 06:16:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrq7eak2m 2025-01-07 06:33:54+00:00| seen|...

MAL-2025-23 Malicious code in zetessf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54b4e49ae22e5325a2ed8fe3e7a32f36e50fdf5fda9ea594cf72b24bd9c97788 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-12996

creationtimestamp| type| source ---|---|--- 2025-01-06 15:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3ggvwcst2a 2025-01-06 15:58:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lf3itcyzux2k...

CVE-2024-43064

creationtimestamp| type| source ---|---|--- 2025-01-06 11:12:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113781107563141439 2025-01-06 11:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2z24gva622 2025-01-06 11:43:07+00:00| seen|...

CVE-2024-20148

creationtimestamp| type| source ---|---|--- 2025-01-06 03:47:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113779361382316972 2025-01-06 04:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2bkr5yyc22 2025-01-06 04:42:47+00:00| seen|...

BG.Studio Color Phone Call Screen App 安全漏洞

BG.Studio Color Phone Call Screen App BG.Studio com.asianmobile.callcolor is a color phone call screen app from BG.Studio. A security vulnerability exists in the BG.Studio Color Phone Call Screen App Android24 version that originates from allowing any application to send a crafted call via the...

PT-2025-4301 · Aat · Aat

Name of the Vulnerable Software and Affected Versions: AAT Another Activity Tracker versions prior to 1.26 Description: AAT is a GPS-tracking application for tracking sportive activities, with an emphasis on cycling. The issue allows for data exfiltration from malicious apps installed on the same...

PT-2025-3003 · Asianmobile · Com.Asianmobile.Callcolor

Name of the Vulnerable Software and Affected Versions: com.asianmobile.callcolor aka Color Phone Call Screen App version 24 for Android Description: The issue allows any application to place phone calls without user interaction by sending a crafted intent via the...

PT-2025-2999 · Unknown · Com.Remi.Colorphone.Callscreen.Calltheme.Callerscreen

Name of the Vulnerable Software and Affected Versions: com.remi.colorphone.callscreen.calltheme.callerscreen aka Color Phone: Call Screen Theme versions through 21.1.9 for Android Description: The issue allows any application to place phone calls without user interaction by sending a crafted inte...

HK DEVERLOP: Personalize Your World Call Theme & Call Screen 安全漏洞

HK DEVERLOP: Personalize Your World Call Theme & Call Screen is a call theme screen from HK DEVERLOP: Personalize Your World. A security vulnerability exists in HK DEVERLOP: Personalize Your World Call Theme & Call Screen version 1.0.7 and earlier, which originates from a call that can be sent vi...

Wallfinity: Lovely Caller Theme iCaller Caller Theme & Dialer 安全漏洞

Wallfinity: Lovely Caller Theme iCaller Caller Theme & Dialer is a premium color caller screen and dialer from Wallfinity: Lovely Caller Theme. A security vulnerability exists in Wallfinity: Lovely Caller Theme iCaller Caller Theme & Dialer 1.1 and prior versions, which stems from a crafted inten...

PT-2025-3002 · Unknown · Com.Callos14.Callscreen.Colorphone

Name of the Vulnerable Software and Affected Versions: com.callos14.callscreen.colorphone also known as iCall OS17 - Color Phone Flash versions 4.3 and earlier Description: The issue allows any application to place phone calls without user interaction by sending a crafted intent via the...

GHSA-R5J8-58V3-G23G

creationtimestamp| type| source ---|---|--- 2025-01-05 01:32:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/57 2025-01-05 01:35:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/79 2025-01-05 01:38:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/101...

Malicious code in api-demo-sample-lib4 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=-...

Apple iPadOS and iPhone OS Information Disclosure Vulnerability

iPadOS is Apple's mobile operating system for iPad devices, which is based on iOS and optimized for iPad. iPhone OS is Apple's operating system for iPhone and iPod touch. Apple iPadOS and iPhone OS suffer from an information disclosure vulnerability that originates from the possibility that a...

ASB-A-369103643

In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to launch arbitrary activities as the system UID due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...