501 matches found
EUVD-2025-13292
Malicious code in bioql PyPI...
EUVD-2023-2538
Malicious code in bioql PyPI...
CVE-2025-10715 APEUni PTE Exam Practice App com.ape_edication AndroidManifest.xml improper export of android application components
A security flaw has been discovered in APEUni PTE Exam Practice App up to 10.8.0 on Android. The impacted element is an unknown function of the file AndroidManifest.xml of the component com.apeedication. The manipulation results in improper export of android application components. The attack...
CVE-2025-10715 APEUni PTE Exam Practice App com.ape_edication AndroidManifest.xml improper export of android application components
A security flaw has been discovered in APEUni PTE Exam Practice App up to 10.8.0 on Android. The impacted element is an unknown function of the file AndroidManifest.xml of the component com.apeedication. The manipulation results in improper export of android application components. The attack...
PT-2025-38537
Name of the Vulnerable Software and Affected Versions APEUni PTE Exam Practice App versions up to 10.8.0 Description A security flaw has been discovered in APEUni PTE Exam Practice App on Android. The issue involves improper export of android application components due to an unknown function with...
CVE-2025-10715: Improper Export of Android Application Components
A security flaw has been discovered in APEUni PTE Exam Practice App up to 10.8.0 on Android. The impacted element is an unknown function of the file AndroidManifest.xml of the component com.apeedication. The manipulation results in improper export of android application components. The attack...
JustTryHarder
This is a cheat sheet repository for the PWK Pentester's Workbench course and the OSCP Offensive Security Certified Professional exam. It is inspired by PayloadAllTheThings. The repository contains various tools, scripts, and resources for penetration testing and exploitation. The repository...
SQL-Injection-Scanner
SQL-Injection-Scanner The following program is an injection sc...
MAL-2025-29579 Malicious code in practice-web-billing (npm)
The package practice-web-billing was found to contain malicious code...
Malicious code in practice-web-billing (npm)
The package practice-web-billing was found to contain malicious code...
MAL-2025-38539 Malicious code in vocab-practice (npm)
The package vocab-practice was found to contain malicious code...
MAL-2025-38540 Malicious code in vocab-practice-js (npm)
The package vocab-practice-js was found to contain malicious code...
Malicious code in vocab-practice (npm)
The package vocab-practice was found to contain malicious code...
Malicious code in vocab-practice-js (npm)
The package vocab-practice-js was found to contain malicious code...
Microsoft expands Zero Trust workshop to cover network, SecOps, and more
Building on identity, devices, and data, the workshop now covers network, infrastructure, and SecOps As the nature of cyberthreats and security challenges evolve, organizations have coalesced around a Zero Trust architecture as the approach to modernize their end-to-end security adoption and...
cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory
A flaw was found in the Python tarfile module. This vulnerability allows attackers to bypass extraction filters, enabling symlink targets to escape the destination directory and allowing unauthorized modification of file metadata via the use of TarFile.extract or TarFile.extractall with the filte...
Vulnerabilities Resolved in Veeam Backup & Replication 12.3.2
All vulnerabilities documented in this article were resolved in Veeam Backup & Replication 12.3.2. Veeam Product Latest Version Download Page Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we...
CVE-2023-0560
A vulnerability, which was classified as critical, has been found in SourceCodester Online Tours & Travels Management System 1.0. This issue affects some unknown processing of the file admin/practicepdf.php. The manipulation of the argument id leads to sql injection. The attack may be initiated...
CVE-2020-28406
An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access details about jobs he should not have access to via the Audit Trail Feature...