PT-2026-67107

Name of the Vulnerable Software and Affected Versions ProfileGrid versions prior to 5.9.9.8 Description An Insecure Direct Object Reference IDOR exists where the software fails to verify if a notification belongs to the requesting user before performing a deletion. This allows any authenticated...

Inside a fake Google security check that becomes a browser RAT

A website styled to resemble a Google Account security page is distributing what may be one of the most fully featured browser-based surveillance toolkits we have observed in the wild. Disguised as a routine security checkup, it walks victims through a four-step flow that grants the attacker push...

CVE-2021-0331

In onCreate of NotificationAccessConfirmationActivity.java, there is a possible overlay attack due to an insecure default value. This could lead to local escalation of privilege and notification access with User execution privileges needed. User interaction is needed for exploitation.Product:...

EUVD-2021-12403

Malware in sbrugna...

EUVD-2021-12232

Malware in sbrugna...

EUVD-2018-16038

Malware in sbrugna...

EUVD-2019-6390

Malware in sbrugna...

EUVD-2013-4993

Malware in sbrugna...

EUVD-2022-25753

Malicious code in bioql PyPI...

EUVD-2023-25414

Malicious code in bioql PyPI...

EUVD-2025-26585

Malicious code in bioql PyPI...

EUVD-2021-2950

Malicious code in bioql PyPI...

EUVD-2024-18517

Malicious code in bioql PyPI...

EUVD-2024-29211

Malicious code in bioql PyPI...

EUVD-2022-43186

Malicious code in bioql PyPI...

EUVD-2022-25494

Malicious code in bioql PyPI...

EUVD-2022-25610

Malicious code in bioql PyPI...

CVE-2025-26442

In onCreate of NotificationAccessConfirmationActivity.java, there is a possible incorrect verification of proper intent filters in NLS due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed f...

CVE-2025-22427

In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to grant notification access above the lock screen due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...

CVE-2025-26442

In onCreate of NotificationAccessConfirmationActivity.java, there is a possible incorrect verification of proper intent filters in NLS due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed f...