41818 matches found
CVE-2025-31689 General Data Protection Regulation - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-018
Cross-Site Request Forgery CSRF vulnerability in Drupal General Data Protection Regulation allows Cross Site Request Forgery.This issue affects General Data Protection Regulation: from 0.0.0 before 3.0.1, from 3.1.0 before 3.1.2...
CGA-6GHH-HJ4P-3V8P
Bulletin has no description...
CGA-4585-55CM-34X5
Bulletin has no description...
CGA-2864-HCRC-453M
Bulletin has no description...
CVE-2025-29929 Tuleap is missing CSRF protection on tracker hierarchy administration
Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF protection on tracker hierarchy administration. An attacker could use this vulnerability to trick victims into submitting or editing artifacts or follow-up comments. This...
CVE-2025-29929 Tuleap is missing CSRF protection on tracker hierarchy administration
Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF protection on tracker hierarchy administration. An attacker could use this vulnerability to trick victims into submitting or editing artifacts or follow-up comments. This...
CVE-2025-29929
CVE-2025-29929 : Tuleap is affected by a cross-site request forgery (CSRF) vulnerability in tracker hierarchy administration. The issue allows an attacker to trick victims into submitting or editing artifacts or follow-up comments. The vulnerability is fixed in Tuleap Community Edition 16.5.99.17...
CVE-2025-31545
Missing Authorization vulnerability in WP Messiah Safe Ai Malware Protection for WP safe-ai-malware-protection-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Safe Ai Malware Protection for WP: from n/a through = 1.0.20...
CVE-2025-31545
Technical details about CVE-2025-31545 are not publicly provided in the supplied documents. The affected plugin is Safe Ai Malware Protection for WP with version up to 1.0.20, but no specifics on root cause, impact, remediation, or exploitation are included.
CVE-2025-31545 WordPress Safe Ai Malware Protection for WP plugin <= 1.0.20 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Messiah Safe Ai Malware Protection for WP safe-ai-malware-protection-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Safe Ai Malware Protection for WP: from n/a through = 1.0.20...
A week in security (March 24 – March 30)
Last week on Malwarebytes Labs: Vulnerability in most browsers abused in targeted attacks "This fraud destroyed my life." Man ends up with criminal record after ID was stolen Moving from WhatsApp to Signal: A good idea? Security expert Troy Hunt hit by phishing attack Booking.com phish uses fake...
PT-2025-13894
Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.4 Description The issue allows an app to potentially access protected user data due to inadequate checks. This has been addressed with improved checks. Recommendations For versions prior to 15.4, update to macOS...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that stems from insufficient data protection and could result in applications accessing sensitive user data...
PT-2025-13874 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS versions prior to 14.7.5 macOS versions prior to 15.4 Description: A logic issue was addressed with improved checks, allowing an app to potentially modify protected parts of the file system. Recommendation...
PT-2025-13952 · Apple · Macos Sonoma +3
Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.7.5 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description: The issue allows an app to access protected user data due to insufficient validation of symlinks. Recommendations:...
PT-2025-14002 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS versions prior to 14.7.5 macOS versions prior to 15.4 Description: An issue exists where an app may be able to modify protected parts of the file system. This issue was addressed by removing the vulnerable...
PT-2025-13913 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS versions prior to 14.7.5 macOS versions prior to 15.4 Description: The issue allows an app to potentially modify protected parts of the file system due to inadequate checks. Recommendations: For macOS...
WordPress plugin Safe Ai Malware Protection for WP 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2025-13787 · Tuleap · Tuleap
Name of the Vulnerable Software and Affected Versions: Tuleap versions prior to 16.5.99.1742306712 Tuleap Enterprise Edition versions prior to 16.5-5 and 16.4-8 Description: The issue is related to the lack of CSRF protection on tracker hierarchy administration. An attacker could exploit this to...
About the security content of iOS 18.4 and iPadOS 18.4
About the security content of iOS 18.4 and iPadOS 18.4 This document describes the security content of iOS 18.4 and iPadOS 18.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...