CVE-2025-23603

creationtimestamp| type| source ---|---|--- 2025-01-22 15:19:14+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdo44kwsk2h 2025-01-22 20:02:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2639...

CVE-2024-11624

there is a possible to add apps to bypass VPN due to Undeclared Permission . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-44258 WordPress Schema App Structured Data plugin <= 1.23.1 - Broken Access Control + CSRF vulnerability

Missing Authorization vulnerability in vberkel Schema App Structured Data schema-app-structured-data-for-schemaorg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Schema App Structured Data: from n/a through = 1.23.1...

CVE-2024-56634

creationtimestamp| type| source ---|---|--- 2024-12-27 15:19:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecby2rsib2o 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...

EPARK Kura Sushi Official App 安全漏洞

EPARK Kura Sushi Official App is a sushi purchasing and reservation storefront application from EPARK, Inc. A security vulnerability exists in the EPARK Kura Sushi Official App version prior to 3.8.5, which stems from an issue with the use of hard-coded encryption keys, where a local attacker may...

WordPress plugin WP Chat App 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

MTN Group: Broken Access Control leads to disclosure of transaction history via /v2/rechargeTransactionHistory endpoint

The vulnerability disclosed the transaction history details of MTN NG customers, including recharge dates, amounts, and transaction IDs. This was caused by insufficient authorization checks in the /v2/rechargeTransactionHistory API endpoint, which allowed access to other customers' data without...

CVE-2024-40860

CVE-2024-40860 describes a logic issue in macOS that could allow an app to modify protected parts of the filesystem. The vulnerability is addressed in macOS Sonoma 14.7 and macOS Sequoia 15. The connected documents confirm a fix is available in those releases; no exploit details or active weaponi...

About the security content of macOS Sonoma 14.7

About the security content of macOS Sonoma 14.7 This document describes the security content of macOS Sonoma 14.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases ar...

PT-2024-25099 · Utarit Information · Utarit Information Soliclub

Name of the Vulnerable Software and Affected Versions: Utarit Information SoliClub versions prior to 4.4.0 for iOS Utarit Information SoliClub versions prior to 5.2.1 for Android Description: The issue affects Utarit Information SoliClub, allowing exploitation of incorrectly configured access...

luci-app-lucky security vulnerability

luci-app-lucky is a LuCI application designed for OpenWrt firmware by the individual developer gdy666. A security vulnerability exists in luci-app-lucky version v2.8.3, which stems from the use of hard-coded credentials...

CVE-2022-48683

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13. An app may be able to break out of its sandbox...

SAP NetWeaver Application Server 跨站脚本漏洞

SAP NetWeaver Application Server is an application server from SAP, Germany. A cross-site scripting vulnerability exists in SAP NetWeaver Application Server ABAP Platform, which stems from a cross-site scripting XSS vulnerability due to failure to adequately encode user-controlled input...

CVE-2024-25700 Persistent XSS in URL added to a shared map

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Web App Builder versions 11.1 and below that may allow a remote, authenticated attacker to create a crafted link that is stored in a web map link which when clicked could potentially execute arbitrary...

The vulnerability of the IBM Engineering Requirements Management DOORS application, related to the manipulation of inter-site requests, allows a perpetrator to execute arbitrary commands.

The vulnerability of the IBM Engineering Requirements Management DOORS application relates to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

CVE-2024-23266

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to modify protected parts of the file system...

Information disclosure

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.1, macOS Ventura 13.6.5. An app may be able to access sensitive user data...

CVE-2023-42878

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data...

Information disclosure

This issue was addressed with improved redaction of sensitive information. This issue is fixed in tvOS 17.1, watchOS 10.1, macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to leak sensitive user information...

CVE-2024-25218

A cross-site scripting XSS vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Project Name parameter /TaskManager/Projects.php...