143 matches found
CVE-2025-14019
CVE-2025-14019 concerns the LINE Android client (versions 13.8–15.5). The in-app browser UI can be spoofed via a specific layout, potentially obscuring a full-screen warning prompt and enabling phishing via UI spoofing. Public sources in the provided documents describe the affected product and ge...
Line Corporation Line Client For Ios 安全漏洞
Line Corporation Line Client For Ios is a communication application from Line Corporation, Japan. A security vulnerability exists in Line Corporation Line Client For Ios prior to version 14.14, which originates from in-app browser address bar spoofing and may lead to phishing attacks...
CVE-2025-14022: Improper Certificate Validation
LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an integrated financial SDK. The SDK interfered with the application's network processing, causing server certificate verification to be disabled for a significant portion of netwo...
Line Corporation Line Client For Ios 安全漏洞
Line Corporation Line Client For Ios is a communication application from Line Corporation, Japan. A security vulnerability exists in Line Corporation Line Client For Ios versions prior to 15.4, which stems from improper validation of SSL/TLS certificates and could lead to a man-in-the-middle atta...
CVE-2025-14023: User Interface (UI) Misrepresentation of Critical Information
LINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the navigation state and the in-app browser's user interface, which could create confusion about the trust context of displayed pages or interactive elements under specific conditions...
CVE-2025-14020: User Interface (UI) Misrepresentation of Critical Information
LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct phishing attacks by...
PT-2025-51203
LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific layout could obscure the full-screen warning prompt, potentially allowing attackers to conduct phishing attacks...
CVE-2025-14019: User Interface (UI) Misrepresentation of Critical Information
LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific layout could obscure the full-screen warning prompt, potentially allowing attackers to conduct phishing attacks...
EUVD-2021-22835
Malware in sbrugna...
EUVD-2014-0104
Malware in sbrugna...
EUVD-2021-22834
Malware in sbrugna...
EUVD-2022-44760
Malicious code in bioql PyPI...
EUVD-2024-46899
Malicious code in bioql PyPI...
EUVD-2023-57854
Malicious code in bioql PyPI...
EUVD-2021-28164
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2025-59691
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PureVPN client applications on Linux through September 2025 allow IPv6 traffic to leak outside the VPN tunnel upon network events such as Wi-Fi reconnect or...
CVE-2025-59691
PureVPN client applications on Linux through September 2025 allow IPv6 traffic to leak outside the VPN tunnel upon network events such as Wi-Fi reconnect or system resume. In the CLI client, the VPN auto-reconnects and claims to be connected, but IPv6 traffic is no longer routed or blocked. In th...
CVE-2025-59691
CVE-2025-59691 affects PureVPN Linux clients (CLI 2.0.1 and GUI 2.10.0). The vulnerability allows IPv6 traffic to leak outside the VPN tunnel during events like Wi‑Fi reconnects or system resume, with the CLI auto-reconnect showing as connected while IPv6 isn’t routed or blocked, and the GUI leav...
CVE-2024-5739
The in-app browser of LINE client for iOS versions below 14.9.0 contains a Universal XSS UXSS vulnerability. This vulnerability allows for cross-site scripting XSS where arbitrary JavaScript can be executed in the top frame from an embedded iframe on any displayed web site within the in-app...