Millions of (very) private chats exposed by two AI companion apps

Cybernews discovered how two AI companion apps, Chattee Chat and GiMe Chat, exposed millions of intimate conversations from over 400,000 users. This is not the first time we have to write about AI "girlfriends" exposing their secrets—and it probably won't be the last. This latest incident is a...

CVE-2025-45095

Lavasoft Web Companion also known as Ad-Aware WebCompanion versions 8.9.0.1091 through 12.1.3.1037 installs the DCIService.exe service with an unquoted service path vulnerability. An attacker with write access to the file system could potentially execute arbitrary code with elevated privileges by...

EUVD-2025-33344

Lavasoft Web Companion also known as Ad-Aware WebCompanion versions 8.9.0.1091 through 12.1.3.1037 installs the DCIService.exe service with an unquoted service path vulnerability. An attacker with write access to the file system could potentially execute arbitrary code with elevated privileges by...

CVE-2025-45095

Lavasoft Web Companion also known as Ad-Aware WebCompanion versions 8.9.0.1091 through 12.1.3.1037 installs the DCIService.exe service with an unquoted service path vulnerability. An attacker with write access to the file system could potentially execute arbitrary code with elevated privileges by...

CVE-2025-45095

Lavasoft Web Companion also known as Ad-Aware WebCompanion versions 8.9.0.1091 through 12.1.3.1037 installs the DCIService.exe service with an unquoted service path vulnerability. An attacker with write access to the file system could potentially execute arbitrary code with elevated privileges by...

Lavasoft Web Companion 安全漏洞

Lavasoft Web Companion is an antivirus program from Lavasoft Canada. A security vulnerability exists in Lavasoft Web Companion versions 8.9.0.1091 through 12.1.3.1037, which stems from an unquoted service path vulnerability in the DCIService.exe service that could lead to the execution of arbitra...

CVE-2025-45095

Lavasoft Web Companion also known as Ad-Aware WebCompanion versions 8.9.0.1091 through 12.1.3.1037 installs the DCIService.exe service with an unquoted service path vulnerability. An attacker with write access to the file system could potentially execute arbitrary code with elevated privileges by...

PT-2025-41386

Name of the Vulnerable Software and Affected Versions Lavasoft Web Companion versions 8.9.0.1091 through 12.1.3.1037 Description Lavasoft Web Companion also known as Ad-Aware WebCompanion installs the DCIService.exe service with an unquoted service path. An attacker with write access to the file...

CVE-2025-45095

Lavasoft Web Companion (also known as Ad-Aware WebCompanion) versions 8.9.0.1091 through 12.1.3.1037 are vulnerable to an unquoted service path vulnerability involving the DCIService.exe service. An attacker with write access to the file system can achieve arbitrary code execution with elevated p...

EUVD-2019-6093

Malware in sbrugna...

EUVD-2020-6416

Malware in sbrugna...

EUVD-2014-5598

Malware in sbrugna...

EUVD-2018-13509

Malware in sbrugna...

EUVD-2019-6184

Malware in sbrugna...

EUVD-2020-25284

Malware in sbrugna...

EUVD-2020-6417

Malware in sbrugna...

EUVD-2012-4927

Malware in sbrugna...

EUVD-2020-27797

Malware in sbrugna...

EUVD-2020-25285

Malware in sbrugna...

WordPress Blocksy Companion plugin <= 2.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Rafshanzani Suhada in WordPress Plugin Blocksy Companion versions = 2.1.14...