307 matches found
CVE-2025-30451
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive user data...
CVE-2025-24217
CVE-2025-24217 affects Apple platforms; fixed in iOS 18.4 / iPadOS 18.4 / tvOS 18.4 / macOS Sequoia 15.4. Description indicates an app may access sensitive user data; root cause details are not provided beyond note of improved redaction of sensitive information. Exploitation status is not disclos...
CVE-2023-36969
creationtimestamp| type| source ---|---|--- 2025-03-28 11:31:37+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cmsmsfilemanagerauthrce.rb 2025-03-29 21:02:04+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3llk7zv6e3t2e...
CVE-2025-2198
creationtimestamp| type| source ---|---|--- 2025-03-20 23:19:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8307 2025-03-21 03:14:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkuandsm6i2j...
CVE-2024-6841
A Cross-Site Request Forgery CSRF vulnerability exists in the latest commit 56b782bcefd2e59b19cd7ba7878b95f54884f502 of the vanna-ai/vanna repository. Two endpoints in the built-in web app that provide SQL functionality are implemented as simple GET requests, making them susceptible to CSRF...
CVE-2024-12217 Path Traversal in gradio-app/gradio
A vulnerability in the gradio-app/gradio repository, version git 67e4044, allows for path traversal on Windows OS. The implementation of the blockedpath functionality, which is intended to disallow users from reading certain files, is flawed. Specifically, while the application correctly blocks...
CVE-2024-8581 Path Traversal in parisneo/lollms-webui
A vulnerability in the uploadapp function of parisneo/lollms-webui V12 Strawberry allows an attacker to delete any file or directory on the system. The function does not implement user input filtering with the filename value, causing a Path Traversal error...
CVE-2025-30123
An issue was discovered on ROADCAM X3 devices. The mobile app APK Viidure contains hardcoded FTP credentials for the FTPX user account, enabling attackers to gain unauthorized access and extract sensitive recorded footage from the device...
CVE-2025-30123
CVE-2025-30123 affects ROADCAM X3 devices; the Viidure mobile APK contains hardcoded FTP credentials for the FTPX user, enabling unauthorized access and extraction of sensitive recorded footage. Vulnerable component: the APK (Viidure) with hardcoded credentials; root cause is credential exposure ...
SunGrow iSolarCloud 安全漏洞
SunGrow iSolarCloud is an Android app for new energy power plant management from China SunGrow SunGrow. It is used for power plant data collection, monitoring, operation and maintenance and operation management. A security vulnerability exists in SunGrow iSolarCloud Android app version...
CVE-2024-13718
creationtimestamp| type| source ---|---|--- 2025-02-18 09:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ligwemhbue2p 2025-02-18 10:57:31+00:00| seen| https://t.me/cvedetector/18297...
CVE-2024-12651
Exposed Dangerous Method or Function vulnerability in PTT Inc. HGS Mobile App allows Manipulating User-Controlled Variables. This issue affects HGS Mobile App: before 6.5.0...
PTT HGS Mobile App 安全漏洞
PTT HGS Mobile App is a mobile application from PTT Turkey that is used to facilitate the management and payment of Highway Electronic Toll Collection System HGS fees. A security vulnerability exists in PTT HGS Mobile App versions prior to 6.5.0, which stems from the presence of a vulnerability...
CVE-2025-22364
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Service Shogun Ach Invoice App ach-invoice-app allows PHP Local File Inclusion.This issue affects Ach Invoice App: from n/a through = 1.0.1...
CVE-2024-23655
Tuta is an encrypted email service. Starting in version 3.118.12 and prior to version 3.119.10, an attacker is able to send a manipulated email so that the user can no longer use the app to get access to received emails. By sending a manipulated email, an attacker could put the app into an unusab...
CVE-2024-1561
An issue was discovered in gradio-app/gradio, where the /componentserver endpoint improperly allows the invocation of any method on a Component class with attacker-controlled arguments. Specifically, by exploiting the moveresourcetoblockcache method of the Block class, an attacker can copy any fi...
CVE-2024-1540
A command injection vulnerability exists in the deploy+test-visual.yml workflow of the gradio-app/gradio repository, due to improper neutralization of special elements used in a command. This vulnerability allows attackers to execute unauthorized commands, potentially leading to unauthorized...
CVE-2024-34897
CVE-2024-34897 affects the Nedis SmartLife Android app v1.4.0, with an API key disclosure vulnerability that could expose credentials in transit/at rest. According to the initial description, the vulnerability has a CVSS v3.1 base score of 7.5 (HIGH), attack vector Network, required privileges No...
