578 matches found
CVE-2025-43405
A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access user-sensitive data...
PT-2025-44851
Name of the Vulnerable Software and Affected Versions macOS versions prior to 14.8.2 macOS versions prior to 15.7.2 Description An application may be able to access user-sensitive data due to insufficient entitlement checks. The issue was resolved by implementing additional entitlement checks...
PT-2025-44813
Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description An application may be able to access user-sensitive data due to insufficient entitlement checks. Recommendations Update to macOS Sonoma version 14.8.2 or...
PT-2025-44837
Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.7.2 Description A flaw exists in macOS that could allow an application to access user-sensitive data due to a downgrade issue affecting Intel-based Mac computers. This issue was addressed with additional code-signing...
CVE-2025-12460
An XSS issue was discovered in Afterlogic Aurora webmail version 9.8.3 and below. An attacker can send a specially crafted HTML e-mail message with JavaScript in an img HTML tag. This could allow a remote attacker to load arbitrary JavaScript code in the context of a webmail user's browser window...
EUVD-2025-37029
2nd Line Android App version v1.2.92 and before package name com.mysecondline.app, developed by AutoBizLine, Inc., contains an improper access control vulnerability in its authentication mechanism. The server only validates the first character of the usertoken, enabling attackers to brute force...
CVE-2025-62604 MeterSphere logic flaw allows retrieval of arbitrary user information
MeterSphere is an open source continuous testing platform. Prior to version 2.10.25-lts, a logic flaw allows retrieval of arbitrary user information. This allows an unauthenticated attacker to log in to the system as any user. This issue has been patched in version 2.10.25-lts...
PT-2025-43364
Name of the Vulnerable Software and Affected Versions MeterSphere versions prior to 2.10.25-lts Description MeterSphere is a continuous testing platform. A logic flaw exists that allows retrieval of arbitrary user information. This flaw enables an unauthenticated attacker to log in to the system ...
EUVD-2025-35189
The incomplete verification mechanism in the AutoBizLine com.mysecondline.app 1.2.91 allows attackers to log in as other users and gain unauthorized access to their personal information...
EUVD-2016-7795
Malware in sbrugna...
EUVD-2020-8160
Malware in sbrugna...
EUVD-2015-2946
Malware in sbrugna...
EUVD-2019-6343
Malware in sbrugna...
EUVD-2020-27788
Malware in sbrugna...
EUVD-2020-6074
Malware in sbrugna...
EUVD-2017-9771
Malware in sbrugna...
EUVD-2020-23214
Malware in sbrugna...
EUVD-2021-14156
Malware in sbrugna...