31748 matches found
CVE-2025-34229 Vasion Print (formerly PrinterLogic) Blind SSRF via HP installApp.php
Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 VA/SaaS deployments contain a blind server-side request forgery SSRF vulnerability reachable via the /var/www/app/consolerelease/hp/installApp.php script that can be...
CVE-2025-34216
Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 22.0.1026 and Application prior to version 20.0.2702 VA deployments only expose a set of unauthenticated REST API endpoints that return configuration files and clear‑text passwords. The same endpoints also disclose the...
CVE-2025-34216 Vasion Print (formerly PrinterLogic) RCE and Password Leaks via API
Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 22.0.1026 and Application prior to version 20.0.2702 VA deployments only expose a set of unauthenticated REST API endpoints that return configuration files and clear‑text passwords. The same endpoints also disclose the...
CVE-2025-43400
CVE-2025-43400 is an out-of-bounds write vulnerability in FontParser that Apple fixed across multiple platforms. According to the provided documents, the issue could be triggered by processing a maliciously crafted font and may lead to unexpected app termination or memory corruption. Affected pro...
CVE-2025-43400
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in watchOS 26.1, tvOS 26.1. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory...
CVE-2025-43400
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.1 and iPadOS 18.7.1, iOS 26.0.1 and iPadOS 26.0.1, macOS Sequoia 15.7.1, macOS Sonoma 14.8.1, macOS Tahoe 26.0.1, tvOS 26.1, visionOS 26.0.1, watchOS 26.1. Processing a maliciously crafted fo...
EvilAI Malware Masquerades as AI Tools to Infiltrate Global Organizations
Threat actors have been observed using seemingly legitimate artificial intelligence AI tools and software to sneakily slip malware for future attacks on organizations worldwide. According to Trend Micro, the campaign is using productivity or AI-enhanced tools to deliver malware targeting various...
Security Bulletin: IBM App Connect Enterprise Toolkit and IBM Integration Bus for z/OS Toolkit are vulnerable to Improper Restriction of XML External Entity Reference due to Eclipse JGit (CVE-2025-4949)
Summary IBM App Connect Enterprise Toolkit and IBM Integration Bus for z/OS Toolkit are vulnerable to Improper Restriction of XML External Entity Reference due to Eclipse JGit. Vulnerability Details CVEID:CVE-2025-4949 DESCRIPTION: In Eclipse JGit versions 7.2.0.202503040940-r and older, the...
Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to IBM Semeru Runtime ( CVE-2025-50059, CVE-2025-30761 & CVE-2025-30754 )
Summary IBM App Connect Enterprise is vulnerable to Improper Access Control and Deserialization of Untrusted Data due to IBM Semeru Runtime. Vulnerability Details CVEID:CVE-2025-50059 DESCRIPTION: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ...
CVE-2025-57197
In the Payeer Android application 2.5.0, an improper access control vulnerability exists in the authentication flow for the PIN change feature. A local attacker with root access to the device can dynamically instrument the app to bypass the current PIN verification check and directly modify the...
PT-2025-39853
Name of the Vulnerable Software and Affected Versions macOS versions prior to 14.8.1 macOS Tahoe versions prior to 26.0.1 macOS Sequoia versions prior to 15.7.1 visionOS versions prior to 26.0.1 iOS versions prior to 26.0.1 iPadOS versions prior to 26.0.1 iOS versions prior to 18.7.1 iPadOS...
About the security content of macOS Sonoma 14.8.1
About the security content of macOS Sonoma 14.8.1 This document describes the security content of macOS Sonoma 14.8.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...
PT-2025-39806
Name of the Vulnerable Software and Affected Versions mirweiye wenkucms versions up to 3.4 Description A flaw exists that allows for remote operating system command injection. This occurs due to manipulation of the createPathOne function within the app/common/common.php file. The exploit has been...
PT-2025-39852
Name of the Vulnerable Software and Affected Versions Payeer Android application version 2.5.0 Description An improper access control issue exists in the authentication process for changing the PIN in the Payeer Android application. A local attacker with root access to the device can bypass the P...
CVE-2025-11101
creationtimestamp| type| source ---|---|--- 2025-09-28 09:02:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lzv55wtwkj2a...
CVE-2025-60173
creationtimestamp| type| source ---|---|--- 2025-09-28 07:32:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lzuy56hfcj2i...
CVE-2025-60156
creationtimestamp| type| source ---|---|--- 2025-09-28 00:02:50+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lzu6yorayg2k...
CVE-2025-60164
Cross-Site Request Forgery CSRF vulnerability in NewsMAN NewsmanApp newsmanapp allows Stored XSS.This issue affects NewsmanApp: from n/a through = 2.7.7...
Neon App pays users to record their phone calls, sells data for AI training [updated]
TechCrunch reports about a “bizarre app” inviting you to record and share your audio calls so that it can sell the data to AI companies. And if that’s not weird enough on its own, it’s ranking No. 2 in Apple's US app store at the time of writing. The name of the app is Neon Mobile and it promises...
