704 matches found
CVE-2025-48127 WordPress Push notification for Mobile and Web app plugin <= 2.0.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in App Cheap Push notification for Mobile and Web app push-notification-mobile-and-web-app allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Push notification for Mobile and Web app: from n/a through = 2.0.3...
CVE-2025-30417
creationtimestamp| type| source ---|---|--- 2025-05-15 16:35:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16525 2025-05-15 19:03:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpa7cw7aan2p 2025-05-20 10:00:00+00:00| seen|...
CVE-2025-47707
creationtimestamp| type| source ---|---|--- 2025-05-14 17:32:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16342 2025-05-14 18:57:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp5oiz2mo62e...
CVE-2025-47298
creationtimestamp| type| source ---|---|--- 2025-05-06 03:20:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15037 2025-05-06 06:21:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loiajnvxz22e...
CVE-2025-0915
creationtimestamp| type| source ---|---|--- 2025-05-05 21:20:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14992 2025-05-06 00:15:08+00:00| seen| https://t.me/cvedetector/24500 2025-05-06 00:21:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lohmh7upwn2h...
CVE-2023-38951
creationtimestamp| type| source ---|---|--- 2025-05-05 17:48:55+00:00| seen| https://t.me/truesecator/7008 2025-05-05 18:01:11+00:00| seen| https://t.me/icscert/1143 2025-05-06 21:02:16+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lojrr7y3cr2q 2025-05-24 14:44:53+00:00|...
CVE-2025-1495
creationtimestamp| type| source ---|---|--- 2025-05-03 17:17:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14699 2025-05-03 18:06:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lobwjlotlv2h 2025-05-03 19:37:35+00:00| seen|...
CVE-2025-30516 Unauthorized Notification Exposure in Mobile App Under Specific Conditions
Mattermost Mobile Apps versions =2.25.0 fail to terminate sessions during logout under certain conditions e.g. poor connectivity, allowing unauthorized users on shared devices to access sensitive notification content via continued mobile notifications...
CVE-2025-32077
creationtimestamp| type| source ---|---|--- 2025-04-11 16:51:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11464 2025-04-11 19:43:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmkrosjlv426 2025-04-11 20:38:18+00:00| seen| https://t.me/cvedetector/22770...
CVE-2023-42969
A security vulnerability in Apple iOS , iPadOS , and macOS allows an application to break out of its sandbox due to improper handling of caches . This issue was addressed in iOS 17 , iPadOS 17 , iOS 16.7 , iPadOS 16.7 , macOS Sonoma 14 , macOS Ventura 13.6 , and macOS Monterey 12.7 . Exploitation...
CVE-2025-27693
creationtimestamp| type| source ---|---|--- 2025-04-02 03:01:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llsfiyksa42m 2025-04-02 04:07:10+00:00| seen| https://t.me/cvedetector/21841...
CVE-2025-30458
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to read files outside of its sandbox...
PT-2025-13970 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 Description: The issue allows a sandboxed app to potentially access sensitive user data in system logs. This is due to inadequate redaction of sensitive information. The estimated number of potentially affected...
CVE-2025-20233
In the Splunk App for Lookup File Editing versions below 4.0.5, a script in the app used the chmod and makedirs Python functions in a way that resulted in overly broad read and execute permissions. This could lead to improper access control for a low-privileged user...
Xiaomi Mi Connect Service APP 安全漏洞
Xiaomi Mi Connect Service APP is an application from China's Xiaomi Xiaomi that is used to enable connectivity and interaction between Xiaomi devices, which helps users to quickly connect and manage a variety of Xiaomi smart devices to enable data transfer and collaborative work between devices. ...
A week in security (March 10 – March 16)
Last week on Malwarebytes Labs: Research on iOS apps shows widespread exposure of secrets Don’t let your kids on Roblox if you’re not comfortable, says Roblox CEO Update your iPhone now: Apple patches vulnerability used in "extremely sophisticated attacks" The dark side of sports betting: How...
CVE-2025-2342
creationtimestamp| type| source ---|---|--- 2025-03-16 16:46:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7715 2025-03-16 18:53:03+00:00| seen| https://t.me/cvedetector/20412 2025-03-16 19:30:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkjeufh57...
CVE-2025-1773
creationtimestamp| type| source ---|---|--- 2025-03-15 04:45:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7663 2025-03-15 06:55:36+00:00| seen| https://t.me/cvedetector/20349 2025-03-15 08:55:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkfqwncqot2h...
Research on iOS apps shows widespread exposure of secrets
Researchers found that most of the apps available on Apple’s App Store leak at least one hard-coded secret. The researchers looked at 156,000 iOS apps and discovered more than 815,000 hardcoded secrets, including very sensitive secrets like keys to cloud storage, various Application Programming...
CVE-2024-52905
creationtimestamp| type| source ---|---|--- 2025-03-10 16:38:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7010 2025-03-10 19:02:32+00:00| seen| https://t.me/cvedetector/19967 2025-03-10 19:45:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk2cvzvlzd2e...