CVE-2025-36603

Dell AppSync, versions 4.6.0.0, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering...

CVE-2025-41458

Unencrypted storage in the database in Two App Studio Journey v5.5.9 for iOS allows local attackers to extract sensitive data via direct access to the app’s filesystem...

PT-2025-30349 · Android +1 · Android +1

Name of the Vulnerable Software and Affected Versions: Genshin Albedo Cat House App version 1.0.2 Description: A vulnerability exists in Genshin Albedo Cat House App version 1.0.2 on Android due to improper export of android application components within the AndroidManifest.xml file of the...

CVE-2025-7892

A vulnerability classified as problematic has been found in IDnow App up to 9.6.0 on Android. This affects an unknown part of the file AndroidManifest.xml of the component de.idnow. The manipulation leads to improper export of android application components. Local access is required to approach...

CVE-2025-7892

A vulnerability classified as problematic has been found in IDnow App up to 9.6.0 on Android. This affects an unknown part of the file AndroidManifest.xml of the component de.idnow. The manipulation leads to improper export of android application components. Local access is required to approach...

CVE-2025-7892

The CVE-2025-7892 entry concerns the IDnow App for Android up to version 9.6.0, specifically an issue in the AndroidManifest.xml for the de.idnow component that leads to improper export of application components. The root cause is described as manipulation of the manifest, with local access requi...

CVE-2025-7892 IDnow App de.idnow AndroidManifest.xml improper export of android application components

A vulnerability classified as problematic has been found in IDnow App up to 9.6.0 on Android. This affects an unknown part of the file AndroidManifest.xml of the component de.idnow. The manipulation leads to improper export of android application components. Local access is required to approach...

PT-2025-30193

Name of the Vulnerable Software and Affected Versions Dunamu StockPlus App versions up to 7.62.10 Description A vulnerability exists in Dunamu StockPlus App on Android. The issue involves improper export of android application components due to manipulation of an unknown functionality within the...

PT-2025-30195 · Idnow · Idnow App

Name of the Vulnerable Software and Affected Versions: IDnow App versions up to 9.6.0 Description: A problematic issue has been identified in the IDnow App for Android, potentially leading to improper export of Android application components due to manipulation of the AndroidManifest.xml file...

PT-2025-30185 · Eluktronics · Eluktronics Control Center

Name of the Vulnerable Software and Affected Versions: Eluktronics Control Center version 5.23.51.41 Description: A critical issue exists in Eluktronics Control Center, potentially allowing for command injection. The issue affects an unknown function within the AiStoneServiceMyControlCenterComman...

PT-2025-30196 · Unknown · Foresight News App

Name of the Vulnerable Software and Affected Versions: Foresight News App versions up to 2.6.4 Description: A problematic issue exists in the Foresight News App related to the improper export of Android application components. The issue affects unknown code within the AndroidManifest.xml file of...

Incorrect Default Permissions

Overview Affected versions of this package are vulnerable to Incorrect Default Permissions due to world-writable permissions set on SBOM files in the file system. An attacker can modify or delete SBOM files by gaining local access to the running image, which may confuse security scanners or disru...

PT-2025-31424 · Dell · Dell Smartfabric Os10

Name of the Vulnerable Software and Affected Versions: Dell SmartFabric OS10 Software versions prior to 10.6.0.5 Description: Dell SmartFabric OS10 Software is susceptible to a Files or Directories Accessible to External Parties issue. A low privileged attacker with local access could potentially...

PT-2025-31427 · Dell · Dell Smartfabric Os10

Name of the Vulnerable Software and Affected Versions: Dell SmartFabric OS10 Software versions prior to 10.6.0.5 Description: Dell SmartFabric OS10 Software is susceptible to a Use of Hard-coded Password issue. A local attacker with low privileges could potentially exploit this, leading to...

CVE-2025-7564

A vulnerability, which was classified as critical, has been found in LB-LINK BL-AC3600 1.0.22. Affected by this issue is some unknown functionality of the file /etc/shadow. The manipulation with the input root:blinkadmin leads to hard-coded credentials. Local access is required to approach this...

CVE-2025-30483

Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0 contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2025-30483

CVE-2025-30483 affects Dell ECS prior to 3.8.1.5 and Dell ObjectScale prior to 4.0.0.0, where an insertion of sensitive information into log files may allow a low-privilege, local attacker to disclose information. The NVD-derived CVSSv3.1 base score is 5.5 (Medium) with LOCAL, LOW complexity, and...

CVE-2025-30483

Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0 contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below

CVE-2025-27591-Proof-Of-Concept Existía una vulnerabilidad de...

microcode_ctl: Exposure of sensitive information

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel AtomR processors may allow an authenticated user to potentially enable information disclosure via local access...