142 matches found
Nextcloud: SVG filter primitives bypass remote image blocking, enabling email tracking without consent.
A vulnerability was discovered in the HTML sanitizer of the Roundcube webmail application. The sanitizer did not properly handle the SVG filter primitive, allowing external resources to be loaded even when the "Block remote images" setting was enabled. This vulnerability could be used to track...
PT-2026-7086
Name of the Vulnerable Software and Affected Versions Roundcube Webmail versions prior to 1.5.13 Roundcube Webmail versions prior to 1.6.13 Description When the "Block remote images" feature is enabled, Roundcube Webmail fails to block SVG feImage elements. This can potentially allow for maliciou...
CVE-2025-43496
The issue was addressed by adding additional logic. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Remote content may be loaded even when the 'Load Remote Images' setting is turned off...
CVE-2025-43496
The issue was addressed by adding additional logic. This issue is fixed in watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, visionOS 26.1. Remote content may be loaded even when the 'Load Remote Images' setting is turned off...
CVE-2025-43496
The issue was addressed by adding additional logic. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Remote content may be loaded even when the 'Load Remote Images' setting is turned off...
CVE-2025-43496
The CVE-2025-43496 issue affects Apple platforms (watchOS 26.1; macOS Tahoe 26.1; iOS 26.1/iPadOS 26.1; iOS 18.7.2/iPadOS 18.7.2; macOS Sequoia 15.7.2; visionOS 26.1). Description: remote content could be loaded even when the device setting Load Remote Images is off. Root cause: insufficient logi...
PT-2025-44905
Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.2 iPadOS versions prior to 18.7.2 Description A flaw exists where remote content could be loaded despite the 'Load Remote Images' setting being disabled. This issue was resolved by implementing additional logic to...
CVE-2025-43280
The issue was resolved by not loading remote images. This issue is fixed in iOS 18.6 and iPadOS 18.6. Forwarding an email could display remote images in Mail in Lockdown Mode...
EUVD-2025-34696
The issue was resolved by not loading remote images This issue is fixed in iOS 18.6 and iPadOS 18.6. Forwarding an email could display remote images in Mail in Lockdown Mode...
CVE-2025-43280
The issue was resolved by not loading remote images. This issue is fixed in iOS 18.6 and iPadOS 18.6. Forwarding an email could display remote images in Mail in Lockdown Mode...
CVE-2025-43280
The issue was resolved by not loading remote images This issue is fixed in iOS 18.6 and iPadOS 18.6. Forwarding an email could display remote images in Mail in Lockdown Mode...
CVE-2025-43280
The issue was resolved by not loading remote images. This issue is fixed in iOS 18.6 and iPadOS 18.6. Forwarding an email could display remote images in Mail in Lockdown Mode...
CVE-2025-43280
CVE-2025-43280 affects Apple iOS/iPadOS Mail behavior. The vulnerability, stemming from forwarding an email in Lockdown Mode, could allow remote images to load in Mail. Apple notes the issue is resolved by not loading remote images, with fixes included in iOS 18.6 and iPadOS 18.6. The public reco...
CVE-2025-43280
The issue was resolved by not loading remote images. This issue is fixed in iOS 18.6 and iPadOS 18.6. Forwarding an email could display remote images in Mail in Lockdown Mode...
EUVD-2018-2371
Malware in sbrugna...
EUVD-2005-2513
Malware in sbrugna...
EUVD-2018-16947
Malware in sbrugna...
EUVD-2025-21647
Malicious code in bioql PyPI...