CVE-2025-6855

creationtimestamp| type| source ---|---|--- 2025-06-29 09:55:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19859 2025-06-29 13:00:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsqpysfxo62o 2025-07-02 21:07:33+00:00| published-proof-of-concept|...

CVE-2025-53094

creationtimestamp| type| source ---|---|--- 2025-06-27 20:25:01+00:00| seen| https://bsky.app/profile/potato.software/post/3lsmhwirigj2p 2025-06-27 20:39:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsmiqcpzd325 2025-06-27 20:52:27+00:00| published-proof-of-concept|...

CVE-2025-52810

creationtimestamp| type| source ---|---|--- 2025-06-27 14:37:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsluith26t2a...

CVE-2025-52902

creationtimestamp| type| source ---|---|--- 2025-06-26 11:15:58+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-4wx8-5gm2-2j97 2025-06-26 14:51:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19609 2025-06-26...

PT-2025-27002

Name of the Vulnerable Software and Affected Versions: Octo-STS versions prior to v0.5.3 Description: Octo-STS is a GitHub App that acts like a Security Token Service STS for the GitHub API. The issue allows for unauthenticated Server-Side Request Forgery SSRF by abusing fields in OpenID Connect...

CVE-2025-3473

creationtimestamp| type| source ---|---|--- 2025-06-11 17:45:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrdxl7x27i2p 2025-06-14 04:33:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18350...

CVE-2025-5707

creationtimestamp| type| source ---|---|--- 2025-06-06 01:30:27+00:00| published-proof-of-concept| Telegram/Ky7-fAwyzxgpEw1yj-LKv6RLUuZgzm3K9CGTukUJcYN--I 2025-06-06 05:29:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqw445j4rn2k...

CVE-2022-32854

This issue was addressed with improved checks. This issue is fixed in iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An app may be able to bypass Privacy preferences...

CVE-2022-24929

Unprotected Activity in AppLock prior to SMR Mar-2022 Release 1 allows attacker to change the list of locked app without authentication...

CVE-2022-34156

'Hulu / フールー' App for iOS versions prior to 3.0.81 improperly verifies server certificates, which may allow an attacker to eavesdrop on an encrypted communication via a man-in-the-middle attack...

CVE-2021-30757

This issue was addressed by enabling hardened runtime. This issue is fixed in iMovie 10.2.4. Entitlements and privacy permissions granted to this app may be used by a malicious app...

CVE-2021-32477

The last time a user accessed the mobile app is displayed on their profile page, but should be restricted to users with the relevant capability site administrators by default. Moodle versions 3.10 to 3.10.3 are affected...

CVE-2020-14451

An issue was discovered in Mattermost Mobile Apps before 1.29.0. The iOS app allowed Single Sign-On cookies and Local Storage to remain after a logout, aka MMSA-2020-0013...

CVE-2020-25183

Medtronic MyCareLink Smart 25000 all versions contain an authentication protocol vuln where the method used to auth between MCL Smart Patient Reader and MyCareLink Smart mobile app is vulnerable to bypass. This vuln allows attacker to use other mobile device or malicious app on smartphone to auth...

CVE-2020-0654

A security feature bypass vulnerability exists in Microsoft OneDrive App for Android.This could allow an attacker to bypass the passcode or fingerprint requirements of the App.The security update addresses the vulnerability by correcting the way Microsoft OneDrive App for Android handles sharing...

CVE-2020-5573

Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unspecified vectors...

CVE-2019-15395

The Asus ZenFone 3s Max Android device with a build fingerprint of asus/INX00G/ASUSX00G1:7.0/NRD90M/INX00G-14.02.1807.33-20180706:user/release-keys contains a pre-installed app with a package name of com.asus.loguploaderproxy app versionCode=1570000015, versionName=7.0.0.3161222 that allows other...

CVE-2019-15457

The Samsung J6 Android device with a build fingerprint of samsung/j6ltexx/j6lte:8.0.0/R16NW/J600FNXXU3ASC1:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=7000000, versionName=7.0.0.0 that allows other pre-installed apps to...

CVE-2012-5185

Directory traversal vulnerability in the Olive Toast Documents Pro File Viewer formerly Files HD app before 1.11.1 for iOS allows remote attackers to read or delete files by leveraging guest access...

CVE-2025-5033

creationtimestamp| type| source ---|---|--- 2025-05-21 17:43:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17157 2025-05-21 22:24:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lppndktzkz2l...