Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that stems from insufficient input validation, which could lead to malicious applications gaining root privileges...

Apple macOS和Apple iPadOS 安全漏洞

Apple macOS and Apple iPadOS are both products of Apple Inc. Apple macOS is a specialized operating system developed for Mac computers, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iPadOS and Apple macOS, which stems from the possibility that...

LM-Scout: Analyzing the Security of Language Model Integration in Android Apps

Developers are increasingly integrating Language Models LMs into their mobile apps to provide features such as chat-based assistants. To prevent LM misuse, they impose various restrictions, including limits on the number of queries, input length, and allowed topics. However, if the LM integration...

CVE-2025-47733

Server-Side Request Forgery SSRF in Microsoft Power Apps allows an unauthorized attacker to disclose information over a network...

CVE-2025-47733

Server-Side Request Forgery SSRF in Microsoft Power Apps allows an unauthorized attacker to disclose information over a network...

CVE-2025-47733

CVE-2025-47733 is a Server-Side Request Forgery (SSRF) vulnerability in Microsoft Power Apps that can allow an unauthenticated attacker to disclose information over the network. The issue is characterized as an information-disclosure vulnerability affecting Power Apps, with published advisories i...

CVE-2025-47733 Microsoft Power Apps Information Disclosure Vulnerability

...

CVE-2025-47733 Microsoft Power Apps Information Disclosure Vulnerability

...

Microsoft Power Apps Information Disclosure Vulnerability

Server-Side Request Forgery SSRF in Microsoft Power Apps allows an unauthorized attacker to disclose information over a network...

PT-2025-20433 · Microsoft · Power Apps

Name of the Vulnerable Software and Affected Versions: Microsoft Power Apps affected versions not specified Description: The issue is related to Server-Side Request Forgery SSRF in Microsoft Power Apps, allowing an unauthorized attacker to disclose information over a network. No information is...

Microsoft Power Apps 代码问题漏洞

Microsoft Power Apps is a low-code development platform from Microsoft Corporation USA designed to help users easily build customized enterprise applications. A code issue vulnerability exists in Microsoft Power Apps, which stems from vulnerability to server-side request forgery attacks that coul...

SAMSUNG SMR 安全漏洞

SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung cell phone applications. SAMSUNG SMR suffers from a security vulnerability that stems from insufficient validation of intent by the broadcast receiver, which could lead to...

CVE-2025-27132

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios...

CVE-2025-27132

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios...

OpenHarmony 缓冲区错误漏洞

OpenHarmony is an open source project of the OpenAtom China Foundation for a kind of Hongmeng operating system. A buffer error vulnerability exists in OpenHarmony 5.0.3 and earlier versions, which stems from an out-of-bounds write and could lead to the execution of arbitrary code in pre-installed...

Unlocking User-Oriented Pages: Intention-Driven Black-Box Scanner for Real-World Web Applications

Black-box scanners have played a significant role in detecting vulnerabilities for web applications. A key focus in current black-box scanning is increasing test coverage i.e., accessing more web pages. However, since many web applications are user-oriented, some deep pages can only be accessed...

HCL Domino Leap 安全漏洞

HCL Domino Leap is a cloud-based collaboration platform from HCL India that modernizes traditional Domino applications. HCL Domino Leap suffers from a security vulnerability that stems from improper endpoint access control, which could result in certain administrator users importing applications...

SUSE CVE-2017-11354

Fiyo CMS v2.0.7 has an SQL injection vulnerability in dapur/apps/apparticle/sysarticle.php via the name parameter in editing or adding a tag name...

The vulnerability of Microsoft Office, Word, and 365 Apps for Enterprise packages lies in the fact that they allow the loading of unreliable external data alongside reliable data. This allows attackers to circumvent existing security restrictions.

The vulnerability of Microsoft Office, Word, and 365 Apps for Enterprise packages lies in the loading of unreliable external data alongside reliable data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

CVE-2025-46461

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Relentless Apps RRSSB rrssb allows DOM-Based XSS.This issue affects RRSSB: from n/a through = 1.0.1...