835 matches found
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is a distributed operating system developed independently by Huawei Technologies Co. Huawei HarmonyOS suffers from an Improper Security Check vulnerability that originates from a vulnerability in the improper standard security check in the card module, which can be exploited by a...
Huawei HarmonyOS Security Checks for Improper Standards Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from an Improper Security Check Criteria vulnerability that originates from an improper security check criterion for the call module...
Fedora: Security Advisory (FEDORA-2025-604e02ca72)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-58308
Vulnerability of improper criterion security check in the call module. Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...
CVE-2025-58308
Huawei HarmonyOS is affected by CVE-2025-58308 via an improper criterion security check in the call module. Affected versions include HarmonyOS 5.0.1–5.1.0 and 6.0.0. The underlying issue is in the call module’s security check criteria, enabling abnormal feature behavior upon exploitation. The PT...
CVE-2025-58308: Improperly Implemented Security Check for Standard
Vulnerability of improper criterion security check in the call module. Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...
Exploit for Improperly Implemented Security Check for Standard in Fortinet Fortiproxy
watchTowr-vs-Fortiweb-AuthBypass Detection Artifact Generator...
Your passport, now on your iPhone. Helpful or risky?
Apple has launched Digital ID, a way for users in the US to create and present a government-issued ID in Apple Wallet using their passport information. For now, it works only for identity verification at Transportation Security Administration TSA checkpoints in more than 250 airports. Apple says...
The vulnerability of the App-Bound Encryption component in Google Chrome and Microsoft Edge browsers allows a hacker to gain access to confidential information.
The vulnerability of the App-Bound Encryption component in Google Chrome and Microsoft Edge is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow an attacker to gain access to confidential information...
CVE-2025-12613: Improper Neutralization of Argument Delimiters in a Command
Versions of the package cloudinary before 2.7.0 are vulnerable to Arbitrary Argument Injection due to improper parsing of parameter values containing an ampersand. An attacker can inject additional, unintended parameters. This could lead to a variety of malicious outcomes, such as bypassing...
PT-2025-48308
Name of the Vulnerable Software and Affected Versions Huawei HarmonyOS versions 5.0.1 through 5.1.0 Huawei HarmonyOS version 6.0.0 Description An improper criterion security check exists within the call module. Successful exploitation of this issue may cause features to perform abnormally...
Fedora: Security Advisory (FEDORA-2025-a99a329e1b)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
tracing: dynevent: Add a missing lockdown check on dynevent
...
CVE-2025-25255
An Improperly Implemented Security Check for Standard vulnerability CWE-358 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all versions, FortiProxy 7.0.1 through 7.0.22 may allow an unauthenticated proxy user ...
CVE-2025-25255: Improperly Implemented Security Check for Standard
An Improperly Implemented Security Check for Standard vulnerability CWE-358 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all versions, FortiProxy 7.0.1 through 7.0.22 may allow an unauthenticated proxy user ...
Malicious Package
Overview tokensecuritycheck is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in token_security_check (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b62a85484e47dd76287cbde832200d5fed78a12b681c06710549f39f11bb433 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48238 Malicious code in token_security_check (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b62a85484e47dd76287cbde832200d5fed78a12b681c06710549f39f11bb433 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
