51Job 安全漏洞

51Job is a job site from China's MileagePlus 51Job company. A security vulnerability exists in 51Job version 14.22.0, which originates from a specially crafted link that can access sensitive user information...

WordPress plugin Registration Forms 日志信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A log information disclosure...

CVE-2025-22961

A critical information disclosure vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT, VAXT transmitters due to Incorrect Access Control CWE-284. Unauthenticated attackers can directly access sensitive database backup files snapshotusers.db via publicly exposed URLs...

CVE-2022-46163

Travel support program is a rails app to support the travel support program of openSUSE TSP. Sensitive user data bank account details, password Hash can be extracted via Ransack query injection. Every deployment of travel-support-program below the patched version is affected. The...

Google Bans 158,000 Malicious Android App Developer Accounts in 2024

Google said it blocked over 2.36 million policy-violating Android apps from being published to the Google Play app marketplace in 2024 and banned more than 158,000 bad developer accounts that attempted to publish such harmful apps. The tech giant also noted it prevented 1.3 million apps from...

CVE-2025-24109

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to access sensitive user data...

CVE-2025-24109

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access sensitive user data...

CVE-2025-24109

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access sensitive user data...

CVE-2025-24109

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access sensitive user data...

KuGou Music 安全漏洞

KuGou Music 酷狗音乐 is a music program from the Chinese company KuGou KuGou。 A security vulnerability exists in KuGou Music iOS version v20.0.0, which originates from an attacker being able to access sensitive user information by providing a carefully crafted link...

KuGou Concept 安全漏洞

KuGou Concept is a music applet from the Chinese company Kugou KuGou. A security vulnerability exists in KuGou Concept iOS version 4.0.61, which originates from an attacker who can access sensitive user information by providing a carefully crafted link...

Meitu BeautyCam 安全漏洞

Meitu BeautyCam is a photo editor from the Chinese company Meitu Meitu. A security vulnerability exists in Meitu BeautyCam version v12.3.60, which originates from an attacker being able to access sensitive user information by providing a carefully crafted link...

Pixocial BeautyPlus 安全漏洞

Pixocial BeautyPlus is a photo editor from Pixocial. A security vulnerability exists in Pixocial BeautyPlus version 7.8.010, which stems from an attacker's ability to access sensitive user information by providing a carefully crafted link...

Baidu Haokan Video 安全漏洞

Baidu Haokan Video 好看视频 is a video software from the Chinese company Baidu. A security vulnerability exists in Baidu Haokan Video version 7.70.0 that originates from an attacker being able to access sensitive user information by providing a carefully crafted link...

WeSing 安全漏洞

WeSing 全民K歌 is a singing program from the Chinese company WeSing 全民K歌. A security vulnerability exists in WeSing iOS version v9.3.39, which originates from an attacker who can obtain sensitive user information by providing a carefully crafted link...

PT-2025-3363 · Tencent · Wesing

Name of the Vulnerable Software and Affected Versions: Tencent Technology Shanghai Co., Ltd WeSing iOS version 9.3.39 Description: An issue in WeSing iOS allows attackers to access sensitive user information via supplying a crafted link. Recommendations: For version 9.3.39, avoid using links from...

PT-2025-3355 · Hangzhou Bobo Technology Co · Uu Game Booster

Name of the Vulnerable Software and Affected Versions: Hangzhou Bobo Technology Co Ltd UU Game Booster version 10.6.13 Description: An issue in Hangzhou Bobo Technology Co Ltd UU Game Booster allows attackers to access sensitive user information via supplying a crafted link. Recommendations: For...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 15.3, which originates from an application that may be able to access sensitive user data...

Xiaowu Information BeiKe Holdings 安全漏洞

Xiaowu Information BeiKe Holdings Shell is a rent and buy software from China-based Xiaowu Information. A security vulnerability exists in Xiaowu Information BeiKe Holdings version 1.3.50, which originates from an attacker being able to obtain sensitive user information by providing a carefully...

MAL-2025-619 Malicious code in secure-toolbots (npm)

This package contains a multi-functional infostealer malware which establishes C2 via Discord, exfiltrating sensitive user data and files and providing remote shell access to an attacker. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware...