EUVD-2026-40145

Hi.Events through 1.9.0 public check-in list endpoints use shortid as sole access control, allowing unauthenticated access to retrieve full attendee lists including emails and personal information. Attackers with knowledge of the shortid can call GET /api/public/check-in-lists/shortid/attendees t...

EUVD-2019-6675

Malware in sbrugna...

cdns3 Gadget Function Use-After-Free

The vulnerability of the cdns3gadgetepdisable function in the drivers/usb/cdns3/cdns3-gadget.c driver of the Linux operating system’s USB driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...

IBM Cloud Pak for Data information leakage vulnerability

Ibm Cloud Pak For Data is an open and scalable data platform from Ibm USA, Inc. provides a data structure that makes all data available for AI and analytics on any cloud.A security vulnerability exists in IBM Cloud Pak for Data that stems from the fact that IBM Cloud Pak for Data can allow a loca...

Just An SMS Could Let Remote Attackers Access All Your Emails, Experts Warn

Beware! Billion of Android users can easily be tricked into changing their devices' critical network settings with just an SMS-based phishing attack. Whenever you insert a new SIM in your phone and connects to your cellular network for the very first time, your carrier service automatically...

Android CAF-release Remote Privilege Escalation

The vulnerability of the process related to the remote UIM client in Android CAF-release builds is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Android Data Compromise Bypass

The vulnerability of the Android operating system relates to the protection against writing to the eMMC memory module. Exploiting this vulnerability allows a malicious actor to circumvent the protection against writing to the eMMC memory module when power is turned on...

Android Data Compromise

The vulnerability of the Synaptics touchscreen operating system for Android is related to the lack of protection for sensitive data. Exploiting this vulnerability allows a remote attacker to compromise data confidentiality through a local malicious application...