Lucene search
+L

2605 matches found

NVD
NVD
•added 2025/03/02 4:15 p.m.•31 views

CVE-2024-55907

IBM Cognos Analytics Mobile 1.1 for iOS application could allow an attacker to reverse engineer the codebase to gain knowledge about the programming technique, interface, class definitions, algorithms and functions used due to weak obfuscation...

5.3CVSS0.00267EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/02 3:22 p.m.•80 views

CVE-2024-55907

CVE-2024-55907 affects IBM Cognos Analytics Mobile (iOS) version 1.1. The issue arises from weak code obfuscation, enabling an attacker to reverse engineer the codebase to learn about techniques, interfaces, class definitions, algorithms and functions used. IBM’s security bulletin confirms remedi...

5.3CVSS3.8AI score0.00267EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/03/02 3:22 p.m.•13 views

CVE-2024-55907 IBM Cognos Mobile information disclosure

IBM Cognos Analytics Mobile 1.1 for iOS application could allow an attacker to reverse engineer the codebase to gain knowledge about the programming technique, interface, class definitions, algorithms and functions used due to weak obfuscation...

2CVSS3.8AI score0.00267EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/02 3:22 p.m.•36 views

CVE-2024-55907 IBM Cognos Mobile information disclosure

IBM Cognos Analytics Mobile 1.1 for iOS application could allow an attacker to reverse engineer the codebase to gain knowledge about the programming technique, interface, class definitions, algorithms and functions used due to weak obfuscation...

2CVSS0.00267EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/02 12:00 a.m.•9 views

CVE-2024-55907: Inclusion of Sensitive Information in Source Code

IBM Cognos Analytics Mobile 1.1 for iOS application could allow an attacker to reverse engineer the codebase to gain knowledge about the programming technique, interface, class definitions, algorithms and functions used due to weak obfuscation...

5.3CVSS5.8AI score0.00267EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/02 12:00 a.m.•23 views

IBM Cognos Analytics Mobile 安全漏洞

IBM Cognos Analytics Mobile is an application from International Business Machines IBM, Inc. integrates reporting, modeling, analytics, dashboards, cases, and event management. A security vulnerability exists in IBM Cognos Analytics Mobile version 1.1, which stems from weak obfuscation and could...

5.3CVSS6.8AI score0.00267EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/03/02 12:00 a.m.•7 views

PT-2025-9214

Name of the Vulnerable Software and Affected Versions IBM Cognos Analytics Mobile version 1.1 for iOS Description The issue is related to weak obfuscation in the codebase, which could allow an attacker to reverse engineer the application and gain knowledge about the programming technique,...

5.3CVSS0.00267EPSS
SaveExploits0References9
Mend
Mend
•added 2025/02/26 8:38 a.m.•4 views

MSC-2025-2110

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Malicious obfuscated code – the code is...

8.8CVSS5.8AI score
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/26 12:00 a.m.•11 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from anonymous init and exit functions in the virtioconsole module that could lead to obfuscation or ambiguity...

5.5CVSS5.8AI score0.0026EPSS
SaveExploits0References10
CNVD
CNVD
•added 2025/02/19 12:00 a.m.•32 views

Google Chrome Type Obfuscation Vulnerability (CNVD-2025-12381)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a type-obfuscation vulnerability that can be exploited by an attacker to execute arbitrary code inside a sandbox via specially crafted HTML pages...

8.8CVSS9AI score0.08294EPSS
SaveExploits1References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/02/18 8:50 p.m.•9 views

Malicious code in singtok (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 20dad294eb5c742d0044f1dde01f51646f0b34a86a7cb86c84547981276f46ce Importing the module starts Obfuscated code that downloads a well-recognized malware. In the further variations, the code that download and starts the maliciou...

7.3AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2025/02/18 8:50 p.m.•8 views

MAL-2025-191899 Malicious code in tiksing (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ef883e1ad19e5cbeafdda023c535abc9a14f84f81dce26e06d9f10bf77013ab5 Importing the module starts Obfuscated code that downloads a well-recognized malware. In the further variations, the code that download and starts the maliciou...

7.2AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2025/02/18 8:50 p.m.•10 views

MAL-2025-191868 Malicious code in singtok (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 20dad294eb5c742d0044f1dde01f51646f0b34a86a7cb86c84547981276f46ce Importing the module starts Obfuscated code that downloads a well-recognized malware. In the further variations, the code that download and starts the maliciou...

7.2AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/02/18 8:50 p.m.•9 views

Malicious code in tiksing (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ef883e1ad19e5cbeafdda023c535abc9a14f84f81dce26e06d9f10bf77013ab5 Importing the module starts Obfuscated code that downloads a well-recognized malware. In the further variations, the code that download and starts the maliciou...

7.3AI score
SaveExploits0References2
The Hacker News
The Hacker News
•added 2025/02/17 4:30 p.m.•68 views

Microsoft Uncovers New XCSSET macOS Malware Variant with Advanced Obfuscation Tactics

Microsoft said it has discovered a new variant of a known Apple macOS malware called XCSSET as part of limited attacks in the wild. "Its first known variant since 2022, this latest XCSSET malware features enhanced obfuscation methods, updated persistence mechanisms, and new infection strategies,"...

7.8CVSS6.6AI score0.07038EPSS
SaveExploits0
osv_drupal
osv_drupal
•added 2025/02/12 5:38 p.m.•25 views

DRUPAL-CONTRIB-2025-016

This module enables your site to obfuscate Email addresses and prevent spambots to collect them. The module doesn't sanitize HTML data attributes when an email address link is transformed to separate span HTML elements and then transformed back by JavaScript leading to a Cross Site Scripting XSS...

6.1CVSS5.8AI score0.00257EPSS
SaveExploits0References1
Drupal
Drupal
•added 2025/02/12 12:00 a.m.•64 views

SpamSpan filter - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-016

This module enables your site to obfuscate Email addresses and prevent spambots to collect them. The module doesn't sanitize HTML data attributes when an email address link is transformed to separate span HTML elements and then transformed back by JavaScript leading to a Cross Site Scripting XSS...

6.1CVSS5.8AI score0.00257EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/02/09 10:22 a.m.•11 views

CVE-2025-25076

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicholaswilson Graceful Email Obfuscation graceful-email-obfuscation allows Stored XSS.This issue affects Graceful Email Obfuscation: from n/a through = 0.2.2...

6.5CVSS7.2AI score0.0028EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/02/07 4:15 p.m.•22 views

CVE-2024-52884

An issue was discovered in AudioCodes Mediant Session Border Controller SBC before 7.40A.501.841. Due to the use of weak password obfuscation/encryption, an attacker with access to configuration exports INI is able to decrypt the passwords...

7.5CVSS5.8AI score0.00156EPSS
SaveExploits0References2
NVD
NVD
•added 2025/02/07 10:15 a.m.•12 views

CVE-2025-25076

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicholaswilson Graceful Email Obfuscation graceful-email-obfuscation allows Stored XSS.This issue affects Graceful Email Obfuscation: from n/a through = 0.2.2...

6.5CVSS0.0028EPSS
SaveExploits0References1
Rows per page
Query Builder