Aircompressor 安全漏洞

Aircompressor is an airlift open source library that ports the Snappy, LZO, LZ4 and Zstandard compression algorithms to Java. Aircompressor 3.3 and earlier versions contain a security vulnerability that stems from improper handling of malformed data by the Snappy and LZ4 decompressors, which coul...

WordPress plugin Shortcodes and extra features for Phlox theme information leakage vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin Shortcodes and extra...

PT-2025-51911

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.4 macOS Sonoma versions prior to 14.8.4 macOS Tahoe versions prior to 26.2 Description A logic issue exists where insufficient validation may allow an application to access sensitive user data...

PT-2025-51005

CVE-2025-43509 This issue was addressed with improved data protection. This issue is fixed in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3. An app may be able to access sensitive user … https://t.co/68matrJhFp...

PT-2025-50846

The Visitor Logic Lite plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.3 via deserialization of untrusted input from the lpblocks cookie. This is due to the lp track function passing unsanitized cookie data directly to the unserialize function...

WordPress Plugin WP EasyCart Information Disclosure Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin WP EasyCart, which...

Nextcloud Server 安全漏洞

Nextcloud Server is a Nextcloud server program from Nextcloud Open Source. A security vulnerability exists in Nextcloud Server version 30.0.0, which stems from the presence of an insecure direct object reference in the /core/preview endpoint that could lead to unauthorized access to sensitive dat...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.3 and Sequoia prior to 15.7.3, which stems from a permissions issue that could result in access to sensitive...

PT-2025-51910

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.2 Safari versions prior to 26.2 Description An application could potentially access sensitive user data due to insufficient permissions checks. The issue was resolved by implementing additional permissions...

CVE-2025-64011

Nextcloud Server 30.0.0 is vulnerable to an Insecure Direct Object Reference IDOR in the /core/preview endpoint. Any authenticated user can access previews of arbitrary files belonging to other users by manipulating the fileId parameter. This allows unauthorized disclosure of sensitive data, such...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems from the U.S. company Apple Apple developed specifically for Mac computers. A security vulnerability exists in Apple macOS versions prior to Sequoia 15.7.3 that stems from a downgrade issue and could lead to accessing sensitive user data...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems from the U.S.-based Apple Inc. developed specifically for Mac computers. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.3 and Sequoia prior to 15.7.3, which stems from an information disclosure issue that could result in...

Apple macOS Tahoe 安全漏洞

Apple macOS Tahoe is a desktop operating system released by Apple on June 10, 2025, using the LiquidGlass design language and integrating several AI and cross-device features. Apple macOS Tahoe suffers from an insufficient authentication vulnerability that can be exploited by an attacker to cause...

PT-2025-51013

CVE-2025-43519 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3. An app may be able to access sensiti… https://t.co/0Hz1GvyUme...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.3 and Sequoia prior to 15.7.3, which stems from insufficient data protection and could result in access to...

Online Shopping System Advanced SQL注入漏洞

Online Shopping System Advanced is an online store website by Puneeth Reddy H C Individual Developer. A SQL injection vulnerability exists in Online Shopping System Advanced version 1.0, which stems from a SQL injection in the paymentsuccess.php script that could result in the retrieval of...

PT-2026-7731

Name of the Vulnerable Software and Affected Versions macOS versions prior to 14.8.4 Description A flaw exists in path handling due to improved logic. This could allow an application to access user-sensitive data. Recommendations Update to macOS version 14.8.4...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma prior to version 14.8.3, which stems from a logging issue that could lead to accessing sensitive user data...

PT-2025-50925

The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.9.2. This is due to missing nonce validation on the 'ays sccp results export file' AJAX action. This makes it possible for unauthenticate...

PT-2025-51015

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.7.3 Description A flaw exists in macOS on Intel-based Mac computers that could allow an application to access sensitive user data. The issue was addressed through enhanced code-signing restrictions. Recommendations...