About the security content of iOS 18.7.10 and iPadOS 18.7.10

About the security content of iOS 18.7.10 and iPadOS 18.7.10 This update delivers security fixes that were first made available in the iOS 26.6 and 27 and iPadOS 26.6 and 27 betas. This document describes the security content of iOS 18.7.10 and iPadOS 18.7.10. About Apple security updates For our...

AirDrop and Quick Share Flaws Let Nearby Attackers Trigger Crashes and Bypass Checks

Two researchers have found six security flaws in AirDrop and Quick Share , the wireless features that beam files between nearby devices with no cables or shared network. An attacker within wireless range, with just a laptop and no prior connection, can crash the sharing service on a Mac or iPhone...

Protocol Prying: Systematic Vulnerability Research in the Apple AirDrop and Android Quick Share Proximity Transfer Protocols

Apple AirDrop and Google/Samsung Quick Share are proximity file-transfer protocols used by over five billion devices, yet their application-layer security properties remain largely unstudied because both stacks are proprietary and undocumented. Both protocols are reachable from wireless proximity...

Attackers impersonate Temu in ClickFix $Temu airdrop scam

Update Friday, March 13: A Temu spokesperson contacted us to say: " Temu has not issued any cryptocurrency, token, or digital asset—including any so-called "Temu Coin." Any airdrop, wallet claim, or cryptocurrency offer purporting to be from Temu is fraudulent and has no connection to our company...

UNC4899 Breached Crypto Firm After Developer AirDropped Trojanized File to Work Device

The North Korean threat actor known as UNC4899 is suspected to be behind a sophisticated cloud compromise campaign targeting a cryptocurrency organization in 2025 to steal millions of dollars in cryptocurrency. The activity has been attributed with moderate confidence to the state-sponsored...

Google Brings AirDrop Compatibility to Android's Quick Share Using Rust-Hardened Security

In a surprise move, Google on Thursday announced that it has updated Quick Share, its peer-to-peer file transfer service, to work with Apple's equipment AirDrop, allowing users to more easily share files and photos between Android and iPhone devices. The cross-platform sharing feature is currentl...

EUVD-2019-18186

Malware in sbrugna...

EUVD-2025-24761

Malicious code in bioql PyPI...

EUVD-2025-7143

Malicious code in bioql PyPI...

Malicious code in universal-airdrop-checker-ai (npm)

The package universal-airdrop-checker-ai was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-46460 Malicious code in universal-airdrop-checker-ai (npm)

The package universal-airdrop-checker-ai was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

CVE-2025-49053

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kadesthemes WP Airdrop Manager airdrop allows Stored XSS.This issue affects WP Airdrop Manager: from n/a through = 1.0.5...

CVE-2025-49053

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kadesthemes WP Airdrop Manager airdrop allows Stored XSS.This issue affects WP Airdrop Manager: from n/a through = 1.0.5...

CVE-2025-49053 WordPress WP Airdrop Manager plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kadesthemes WP Airdrop Manager airdrop allows Stored XSS.This issue affects WP Airdrop Manager: from n/a through = 1.0.5...

CVE-2025-49053 WordPress WP Airdrop Manager plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kadesthemes WP Airdrop Manager airdrop allows Stored XSS.This issue affects WP Airdrop Manager: from n/a through = 1.0.5...

CVE-2025-49053

CVE-2025-49053 concerns the WordPress plugin WP Airdrop Manager . The vulnerability is a Stored XSS caused by improper input neutralization during web page generation, affecting versions up to and including 1.0.5 . Exploitation could occur via crafted input stored by the plugin. Mitigation per th...

PT-2025-33184 · WordPress · Wp Airdrop Manager

Name of the Vulnerable Software and Affected Versions: WP Airdrop Manager versions through 1.0.5 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which results in Stored Cross-Site Scripting XSS. Recommendations: Update WP Airdrop Manager to...

WordPress plugin WP Airdrop Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

CVE-2025-49053: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kadesthemes WP Airdrop Manager airdrop allows Stored XSS.This issue affects WP Airdrop Manager: from n/a through = 1.0.5...

WordPress WP Airdrop Manager plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nabil Irawan Patchstack Alliance in WordPress Plugin WP Airdrop Manager versions = 1.0.5...