CVE-2025-25325

CVE-2025-25325 affects YuPao DirectHire for iOS 8.8.0. The issue allows attackers to access sensitive user information when a crafted link is supplied. Reported impact is confidentiality (high) with a CVSS v3.1 base score of 5.5 (medium); attack vector is Local, required user interaction, and no ...

CVE-2025-25329

An issue in Tencent Technology Beijing Company Limited Tencent MicroVision iOS 8.137.0 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-25330

An issue in Boohee Technology Boohee Health iOS 13.0.13 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-25325

An issue in Yibin Fengguan Network Technology Co., Ltd YuPao DirectHire iOS 8.8.0 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-25323

An issue in Qianjin Network Information Technology Shanghai Co., Ltd 51Job iOS 14.22.0 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-25334

An issue in Suning Commerce Group Suning EMall iOS 9.5.198 allows attackers to access sensitive user information via supplying a crafted link...

url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent

Brocade Wget contains an improper input validation vulnerability. An attacker could exploit this via theuserinfosubcomponent of a URI to cause insecure behavior which could potentially cause improper authentication, exposure of sensitive information, or other serious data integrity issues...

CVE-2025-25324

An issue in Shandong Provincial Big Data Center AiShanDong iOS 5.0.0 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-25331

An issue in Beitatong Technology LianJia iOS 9.83.50 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-25331

An issue in Beitatong Technology LianJia iOS 9.83.50 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-25324

Technical details about CVE-2025-25324 are not publicly available in the provided documents. Monitoring for updates from sources may be needed to confirm affected components, root cause, impact, and remediation.

Tencent MicroVision 安全漏洞

Tencent MicroVision Tencent MicroVision is a short video creation and sharing platform from China's Tencent. It is used for users to create, share and view short videos. A security vulnerability exists in Tencent MicroVision version 8.137.0, which stems from a specially crafted link that can acce...

CVE-2025-25326

An issue in the Merchants Union Finance iOS app 6.19.0 allows attackers to access sensitive user information by supplying a crafted link. CVE-2025-25326 has a CVSS v3.1 base score of 5.5 (Medium) with Local attack vector, Low attack complexity, No privileges required, and User interaction require...

CVE-2025-25330

An issue in Boohee Technology Boohee Health iOS 13.0.13 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-25323

An issue in Qianjin Network Information Technology Shanghai Co., Ltd 51Job iOS 14.22.0 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-25333

CVE-2025-25333 affects IKEA CN iOS 4.13.0. The vulnerability allows attackers to access sensitive user information by supplying a crafted link. Impact on confidentiality is stated as high; no root cause, exploit details, or remediation are provided in the available documents.

CVE-2025-25326

An issue in Merchants Union Consumer Finance Company Limited Merchants Union Finance iOS 6.19.0 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-25331

Beitatong Technology LianJia iOS 9.83.50 is reported vulnerable to an issue that allows access to sensitive user information when a crafted link is supplied. The available documents do not specify the underlying root cause, affected components beyond the listed iOS app version, or any remediation...

CVE-2025-25054

Movable Type contains a reflected cross-site scripting vulnerability in the user information edit page. When Multi-Factor authentication plugin is enabled and a user accesses a crafted page while logged in to the affected product, an arbitrary script may be executed on the web browser of the user...

PT-2025-7442 · Nagios Xi · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI version 2024R1.2.2 Description: The issue allows unauthenticated users to access multiple pages that display the usernames and email addresses of all current users. This is an Information Disclosure vulnerability. Recommendations: F...