31580 matches found
CVE-2025-13339
CVE-2025-13339 concerns the Hippoo Mobile App for WooCommerce WordPress plugin. The Wordfence report confirms an unauthenticated path traversal vulnerability allowing reading of arbitrary files via the template_redirect() function, affecting all versions up to and including 1.7.1. The affected so...
EUVD-2025-202393
The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.7.1 via the templateredirect function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain...
Authentication Bypass Using an Alternate Path or Channel
Overview filament/filament is an A collection of full-stack components for accelerated Laravel app development. Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel due to the handling of recovery codes for app-based multi-factor...
CVE-2025-67507
Filament is a collection of full-stack components for accelerated Laravel development. Versions 4.0.0 through 4.3.0 contain a flaw in the handling of recovery codes for app-based multi-factor authentication, allowing the same recovery code to be reused indefinitely. This issue does not affect...
EUVD-2025-202172
Filament is a collection of full-stack components for accelerated Laravel development. Versions 4.0.0 through 4.3.0 contain a flaw in the handling of recovery codes for app-based multi-factor authentication, allowing the same recovery code to be reused indefinitely. This issue does not affect...
CVE-2025-66645
creationtimestamp| type| source ---|---|--- 2025-12-10 00:05:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7lr6xdokj2r...
Huawei HarmonyOS file management app bypasses app lock checksum vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A vulnerability exists in the Huawei HarmonyOS file management app that bypasses the application lock checksum and can be exploited by an attacker to...
Lenovo App Store和Lenovo Browser 安全漏洞
Lenovo App Store and Lenovo Browser are both products of the Chinese company Lenovo.Lenovo App Store is a desktop application.Lenovo Browser is a browser. Lenovo App Store is a desktop application.Lenovo Browser is a browser used to locate, retrieve, and display content on the World Wide Web. A...
Meatmeet Pro App 安全漏洞
Meatmeet Pro App is a meat product purchasing application from Meatmeet, Inc. A security vulnerability exists in Meatmeet Pro App version v1.1.2.0, which stems from improper handling of memory information and could lead to the disclosure of sensitive information...
PT-2025-50495
Name of the Vulnerable Software and Affected Versions Meatmeet Android Mobile Application version 1.1.2.0 Description An exported activity within the application can be initiated, revealing a hidden page. This page displays devices, including two that have not been publicly released. An attacker...
PT-2025-50323
Due to improper BLE security configurations on the device's GATT server, an adjacent unauthenticated attacker can read and write device control commands through the mobile app service wich could render the device unusable...
Meatmeet Pro App 安全漏洞
Meatmeet Pro App is a meat product purchasing app from Meatmeet, Inc. A security vulnerability exists in Meatmeet Pro App version v1.1.2.0, which stems from the mobile app storing hard-coded credentials that could lead to unauthorized network access...
Meatmeet Pro App 安全漏洞
Meatmeet Pro App is a meat product purchasing application from Meatmeet, Inc. A security vulnerability exists in Meatmeet Pro App version 1.1.2.0, which stems from an export activity that could result in accessing a hidden page, potentially revealing unpublished device information...
Meatmeet Pro App 安全漏洞
Meatmeet Pro App is a meat product purchasing application from Meatmeet. A security vulnerability exists in Meatmeet Pro App version v1.1.2.0 that stems from the use of an insecure MD5 hash algorithm that could lead to credential cracking...
PT-2025-50328
A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a local authenticated user to execute code with elevated privileges under certain conditions...
Meatmeet Pro App 安全漏洞
Meatmeet Pro App is a meat product purchasing application from Meatmeet, Inc. A security vulnerability exists in Meatmeet Pro App version v1.1.2.0, which stems from allowing plaintext communication that could lead to traffic interception and complete account cracking...
CVE-2025-65814
RHOPHI Analytics LLP Office App-Edit Word v6.4.1 is affected by a directory traversal vulnerability due to missing security checks in the file import process. The issue is documented across multiple sources (including Red Hat and NVD) with the root cause described as insufficient validation durin...
Meatmeet Pro App 安全漏洞
Meatmeet Pro App is a meat product purchasing application from Meatmeet. A security vulnerability exists in Meatmeet Pro App version v1.1.2.0, which stems from a lack of certificate validation and could lead to traffic interception and complete account cracking...
PT-2025-50298
Name of the Vulnerable Software and Affected Versions Filament versions 4.0.0 through 4.3.0 Description Filament, a collection of full-stack components for accelerated Laravel development, has an issue in how it manages recovery codes for application-based multi-factor authentication. The flaw...
