Motorola Software Fix 安全漏洞

Motorola Software Fix is an Android application from Motorola USA. A security vulnerability exists in Motorola Software Fix, which stems from a DLL hijacking vulnerability during the installation process that could lead to elevated privileges for a local attacker...

Bluebird 安全漏洞

Bluebird is an application from Bluebird South Korea that is used to lock a device into a dedicated mode, restricting the user's access to only specified features or applications. A security vulnerability exists in Bluebird versions prior to 1.1.2, which stems from the kiosk app exposing an...

Dating app scammer cons former US army colonel into leaking national secrets

Even hard-headed military types can fall victim to romance scams, it seems. A former US army colonel faces up to ten years in prison after revealing national secrets on a foreign dating app. David Slater was a retired colonel in the US army who took up work as a civilian at US Strategic Command,...

CVE-2025-40777

creationtimestamp| type| source ---|---|--- 2025-07-16 13:33:58+00:00| seen| https://bsky.app/profile/isc.org/post/3lu3jsy4gus2e 2025-07-16 17:17:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114864045595352116 2025-07-16 20:29:29+00:00| seen| https://seclists.org/oss-sec/2025/q3/4...

CVE-2025-22227

creationtimestamp| type| source ---|---|--- 2025-07-16 10:07:05+00:00| seen| https://bsky.app/profile/snicoll.be/post/3lu36axz77c2d...

TECNO tech.palm.id 安全漏洞

TECNO tech.palm.id is a mobile application from TECNO Corporation in China. A security vulnerability exists in TECNO tech.palm.id, which stems from an authentication flaw that could lead to information disclosure...

Malicious code in angieslist-office-app-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ef02b48854bea0c3c7e012377ff6e37a2ca9b371c56552ac87a3ec84a8ec098 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-50067

Vulnerability in Oracle Application Express component: Strategic Planner Starter App. Supported versions that are affected are 24.2.4 and 24.2.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Express. Successful attac...

Misinterpretation of Input

Overview Affected versions of this package are vulnerable to Misinterpretation of Input in the InnoDB component. A privileged attacker can cause the application to become unresponsive or crash repeatedly by sending specially crafted requests. Remediation A fix was pushed into the master branch bu...

CVE-2025-48795

creationtimestamp| type| source ---|---|--- 2025-07-15 18:48:08+00:00| seen| https://seclists.org/oss-sec/2025/q3/42 2025-07-15 21:24:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ltztmn2viz22 2025-09-30 01:31:28+00:00| seen|...

@finsemble/finsemble-core (>=8.16.0-beta.2, <=9.8.0-iocd.10), @finsemble/finsemble-electron-adapter (>=8.16.0-beta.2, <=9.8.0-iocd.10) +14 more potentially affected by CVE-2025-7657 via electron (>=37.0.0, <=37.2.3)

electron NPM version =37.0.0, =8.16.0-beta.2, =8.16.0-beta.2, =0.0.1, =0.0.1, =1.0.0, =2.6.39, =0.0.1, =2.13.0, =0.20.0-rc.0, =1.0.1, =2.6.31, =2.6.42 and more Source cves: CVE-2025-7657 Source advisory: SNYK:JS-ELECTRON-11023258...

CVE-2025-7503

creationtimestamp| type| source ---|---|--- 2025-07-15 17:42:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3ltzh7v7v2f24 2025-07-21 00:52:15+00:00| seen| https://bsky.app/profile/nelnia.bsky.social/post/3lugrljszkk2x...

CVE-2025-53891

creationtimestamp| type| source ---|---|--- 2025-07-15 06:33:43+00:00| seen| https://bsky.app/profile/potato.software/post/3ltybumgogk26...

CVE-2024-40793

creationtimestamp| type| source ---|---|--- 2025-07-15 04:32:33+00:00| seen| https://bsky.app/profile/lizp.bsky.social/post/3lty33vrqss2d 2025-07-15 04:32:35+00:00| seen| https://bsky.app/profile/lizp.bsky.social/post/3lty33w7hc22d...

CVE-2024-44254

creationtimestamp| type| source ---|---|--- 2025-07-15 04:32:32+00:00| seen| https://bsky.app/profile/lizp.bsky.social/post/3lty33vrqss2d 2025-07-15 04:32:34+00:00| seen| https://bsky.app/profile/lizp.bsky.social/post/3lty33w7hc22d 2025-10-01 18:11:57+00:00| seen|...

Malicious code in scenes-ml-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c945347ba764d47a25e4a06c08fc0562576992fecb23b25905113a20289f0be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5953 Malicious code in scenes-ml-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c945347ba764d47a25e4a06c08fc0562576992fecb23b25905113a20289f0be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @cpce/console-sub-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0e227ba31b179597ff26830a069bf360d8ce9ea5fe6ec81f517bd159dbb5d10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Oracle Application Express 安全漏洞

Oracle Application Express is a low-code development platform from Oracle Corporation USA. A security vulnerability exists in Oracle Application Express version 24.2.4 and 24.2.5, which stems from a Strategic Planner Starter App component vulnerability that could lead to a system takeover...

PT-2025-29622 · Oracle · Oracle Application Express

Name of the Vulnerable Software and Affected Versions: Oracle Application Express versions 24.2.4 through 24.2.5 Description: An easily exploitable issue exists in the Strategic Planner Starter App component of Oracle Application Express. A low-privileged attacker with network access via HTTP can...