CVE-2024-55585

In the moPS App through 1.8.618, all users can access administrative API endpoints without additional authentication, resulting in unrestricted read and write access, as demonstrated by /api/v1/users/resetpassword...

CVE-2024-55585

CVE-2024-55585 affects moPS App up to version 1.8.618. The vulnerability stems from insufficient access control on administrative API endpoints, allowing unauthenticated users to perform read and write actions (example: /api/v1/users/resetpassword). The CVSS shows high impact with confidentialiti...

CVE-2025-5785

creationtimestamp| type| source ---|---|--- 2025-06-06 18:52:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqxiyiv2ar2u...

CVE-2025-49440

creationtimestamp| type| source ---|---|--- 2025-06-06 15:25:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqx5g2hfh22p...

CVE-2025-49443

creationtimestamp| type| source ---|---|--- 2025-06-06 14:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqx3hxsiyc2o...

Malicious code in tcp-app-activation-react (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8b8acee879d06b50ea282023a2896ab53ab591f61f99513e23bc3a582e3bc1d Any computer that has this package installed or running should be considered...

MAL-2025-4767 Malicious code in tcp-app-activation-react (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8b8acee879d06b50ea282023a2896ab53ab591f61f99513e23bc3a582e3bc1d Any computer that has this package installed or running should be considered...

CVE-2025-5192

creationtimestamp| type| source ---|---|--- 2025-06-06 11:07:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqwoyytbet2p...

Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates

Summary IBM App Connect Enterprise Certified Container ACEcc is built on the Red Hat Universal Base Images. ACEcc operator versions 12.0.12 LTS and 12.12.0 contain fixes to the listed CVEs found in the base images. This bulletin provides patch information to address the reported vulnerabilities...

Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to denial of service [CVE-2024-45338]

Summary IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to denial of service. This bulletin provides patch information to address the reported vulnerability. CVE-2024-45338 Vulnerability Details CVEID:CVE-2024-45338 DESCRIPTION: An attacker can craft an...

CVE-2024-46941

creationtimestamp| type| source ---|---|--- 2025-06-06 04:51:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvzy77nut2m...

CVE-2025-5715

A vulnerability was found in Signal App 7.41.4 on Android. It has been declared as problematic. This vulnerability affects unknown code of the component Biometric Authentication Handler. The manipulation leads to missing critical step in authentication. It is possible to launch the attack on the...

CVE-2025-5715

A vulnerability was found in Signal App 7.41.4 on Android. It has been declared as problematic. This vulnerability affects unknown code of the component Biometric Authentication Handler. The manipulation leads to missing critical step in authentication. It is possible to launch the attack on the...

CVE-2025-5715 Signal App Biometric Authentication missing critical step in authentication

A vulnerability was found in Signal App 7.41.4 on Android. It has been declared as problematic. This vulnerability affects unknown code of the component Biometric Authentication Handler. The manipulation leads to missing critical step in authentication. It is possible to launch the attack on the...

CVE-2025-5715

CVE-2025-5715 concerns Signal App 7.41.4 on Android with a vulnerability in the Biometric Authentication Handler causing a missing critical authentication step. The issue affects the authentication flow in the Biometric Authentication Handler component and can be exploited by attacking the physic...

CVE-2025-5715 Signal App Biometric Authentication missing critical step in authentication

A vulnerability was found in Signal App 7.41.4 on Android. It has been declared as problematic. This vulnerability affects unknown code of the component Biometric Authentication Handler. The manipulation leads to missing critical step in authentication. It is possible to launch the attack on the...

CVE-2025-5707

creationtimestamp| type| source ---|---|--- 2025-06-06 01:30:27+00:00| published-proof-of-concept| Telegram/Ky7-fAwyzxgpEw1yj-LKv6RLUuZgzm3K9CGTukUJcYN--I 2025-06-06 05:29:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqw445j4rn2k...

CVE-2025-48133

creationtimestamp| type| source ---|---|--- 2025-06-06 00:47:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvmdajbur2e...

Signal App 安全漏洞

Signal App is an end-to-end encrypted secure messaging platform from Signal USA. A security vulnerability exists in Signal App version 7.41.4, which stems from a missing critical authentication step in the component Biometric Authentication Handler...

PT-2025-24006 · Signal · Signal App

Name of the Vulnerable Software and Affected Versions: Signal App version 7.41.4 Description: A vulnerability was found in the Biometric Authentication Handler component, which affects the authentication process by missing a critical step. The attack can be launched on a physical device and has a...