CVE-2024-54565

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to access sensitive user data...

CVE-2024-54559

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to access sensitive user data...

CVE-2024-54559

CVE-2024-54559 affects macOS Sequoia and was addressed in Sequoia 15.2. The issue is described as an information-disclosure vulnerability where an app may access sensitive user data due to improved checks. The CVSS v3.1 vector indicates a Local attack with Low attack complexity and no privileges ...

CVE-2024-54559

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to access sensitive user data...

CVE-2024-54565

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to access sensitive user data...

CVE-2024-54565

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to access sensitive user data...

CVE-2024-54565

CVE-2024-54565 affects macOS Sequoia (and related macOS components) where an app may be able to access sensitive user data due to insufficient checks. The issue is addressed by Apple in macOS Sequoia 15.2, which includes the fix. The CVSS3.1 base metrics indicate a Low attack complexity local vec...

Apple macOS 信息泄露漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS, which stems from state management improvements, and could lead to applications accessing sensitive user data...

Exploit for CVE-2025-25381

CVE-2025-25381: Plaintext Storage of Sensitive Information in...

CVE-2025-25951

An information disclosure vulnerability in the component /rest/cb/executeBasicSearch of Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows attackers to access sensitive user information...

CVE-2025-1776

Cross-Site Scripting XSS vulnerability in Soteshop, versions prior to 8.3.4, which could allow remote attackers to execute arbitrary code via the ‘query’ parameter in /app-google-custom-search/searchResults. This vulnerability can be exploited to steal sensitive user data, such as session cookies...

CVE-2025-25325

An issue in Yibin Fengguan Network Technology Co., Ltd YuPao DirectHire iOS 8.8.0 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-1746 Cross-Site Scripting vulnerability in OpenCart

Cross-Site Scripting vulnerability in OpenCart versions prior to 4.1.0. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL using the search in the /product/search endpoint. This vulnerability could be exploited to steal...

PT-2025-9101 · Opencart · Opencart

Name of the Vulnerable Software and Affected Versions: OpenCart versions prior to 4.1.0 Description: The issue allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL using the search in the "/product/search" endpoint. This could be exploited to steal...

AiShanDong 安全漏洞

AiShanDong 爱山东 is an application mall system from the Chinese company AiShanDong 爱山东. A security vulnerability exists in AiShanDong version 5.0.0, which originates from a specially crafted link that can access sensitive user information...

Boohee Health 安全漏洞

Boohee Health 薄荷健康 is a weight loss and fitness light fasting management software from the Chinese company Boohee. A security vulnerability exists in Boohee Health version 13.0.13, which originates from a specially crafted link that can access sensitive user information...

YuPao DirectHire 安全漏洞

YuPao DirectHire is a recruiting software from the Chinese company YuPao 鱼泡. A security vulnerability exists in YuPao DirectHire version 8.8.0, which originates from a specially crafted link that can access sensitive user information...

MUCFC Merchants Union Finance 安全漏洞

MUCFC Merchants Union Finance MUCFC is a credit loan installment borrowing platform from China Merchants Union MUCFC Corporation. A security vulnerability exists in MUCFC Merchants Union Finance iOS version 6.19.0, which originates from a specially crafted link that can access sensitive user...

IKEA 信息泄露漏洞

IKEA is a well-known furniture retail brand from Sweden by the Dutch company IKEA. It offers a wide range of home products and food products to fulfill life's needs. A security vulnerability exists in IKEA version 4.13.0 that originates from a specially crafted link that can access sensitive user...

Suning EMall 安全漏洞

Suning EMall is an integrated online shopping platform of China-based Suning Ebay Suning Inc. A security vulnerability exists in Suning EMall iOS version 9.5.198, which originates from a specially crafted link that can access sensitive user information...