Boohee Health 安全漏洞

Boohee Health 薄荷健康 is a weight loss and fitness light fasting management software from the Chinese company Boohee. A security vulnerability exists in Boohee Health version 13.0.13, which originates from a specially crafted link that can access sensitive user information...

MUCFC Merchants Union Finance 安全漏洞

MUCFC Merchants Union Finance MUCFC is a credit loan installment borrowing platform from China Merchants Union MUCFC Corporation. A security vulnerability exists in MUCFC Merchants Union Finance iOS version 6.19.0, which originates from a specially crafted link that can access sensitive user...

IKEA 信息泄露漏洞

IKEA is a well-known furniture retail brand from Sweden by the Dutch company IKEA. It offers a wide range of home products and food products to fulfill life's needs. A security vulnerability exists in IKEA version 4.13.0 that originates from a specially crafted link that can access sensitive user...

WordPress plugin Registration Forms 日志信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A log information disclosure...

CVE-2025-22961

A critical information disclosure vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT, VAXT transmitters due to Incorrect Access Control CWE-284. Unauthenticated attackers can directly access sensitive database backup files snapshotusers.db via publicly exposed URLs...

CVE-2022-46163

Travel support program is a rails app to support the travel support program of openSUSE TSP. Sensitive user data bank account details, password Hash can be extracted via Ransack query injection. Every deployment of travel-support-program below the patched version is affected. The...

Google Bans 158,000 Malicious Android App Developer Accounts in 2024

Google said it blocked over 2.36 million policy-violating Android apps from being published to the Google Play app marketplace in 2024 and banned more than 158,000 bad developer accounts that attempted to publish such harmful apps. The tech giant also noted it prevented 1.3 million apps from...

CVE-2025-24109

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access sensitive user data...

CVE-2025-24109

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to access sensitive user data...

CVE-2025-24109

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access sensitive user data...

CVE-2025-24109

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access sensitive user data...

KuGou Music 安全漏洞

KuGou Music 酷狗音乐 is a music program from the Chinese company KuGou KuGou。 A security vulnerability exists in KuGou Music iOS version v20.0.0, which originates from an attacker being able to access sensitive user information by providing a carefully crafted link...

Pixocial BeautyPlus 安全漏洞

Pixocial BeautyPlus is a photo editor from Pixocial. A security vulnerability exists in Pixocial BeautyPlus version 7.8.010, which stems from an attacker's ability to access sensitive user information by providing a carefully crafted link...

PT-2025-3355 · Hangzhou Bobo Technology Co · Uu Game Booster

Name of the Vulnerable Software and Affected Versions: Hangzhou Bobo Technology Co Ltd UU Game Booster version 10.6.13 Description: An issue in Hangzhou Bobo Technology Co Ltd UU Game Booster allows attackers to access sensitive user information via supplying a crafted link. Recommendations: For...

PT-2025-3363 · Tencent · Wesing

Name of the Vulnerable Software and Affected Versions: Tencent Technology Shanghai Co., Ltd WeSing iOS version 9.3.39 Description: An issue in WeSing iOS allows attackers to access sensitive user information via supplying a crafted link. Recommendations: For version 9.3.39, avoid using links from...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 15.3, which originates from an application that may be able to access sensitive user data...

WeSing 安全漏洞

WeSing 全民K歌 is a singing program from the Chinese company WeSing 全民K歌. A security vulnerability exists in WeSing iOS version v9.3.39, which originates from an attacker who can obtain sensitive user information by providing a carefully crafted link...

KuGou Concept 安全漏洞

KuGou Concept is a music applet from the Chinese company Kugou KuGou. A security vulnerability exists in KuGou Concept iOS version 4.0.61, which originates from an attacker who can access sensitive user information by providing a carefully crafted link...

Xiaowu Information BeiKe Holdings 安全漏洞

Xiaowu Information BeiKe Holdings Shell is a rent and buy software from China-based Xiaowu Information. A security vulnerability exists in Xiaowu Information BeiKe Holdings version 1.3.50, which originates from an attacker being able to obtain sensitive user information by providing a carefully...

Meitu BeautyCam 安全漏洞

Meitu BeautyCam is a photo editor from the Chinese company Meitu Meitu. A security vulnerability exists in Meitu BeautyCam version v12.3.60, which originates from an attacker being able to access sensitive user information by providing a carefully crafted link...