PT-2025-4301 · Aat · Aat

Name of the Vulnerable Software and Affected Versions: AAT Another Activity Tracker versions prior to 1.26 Description: AAT is a GPS-tracking application for tracking sportive activities, with an emphasis on cycling. The issue allows for data exfiltration from malicious apps installed on the same...

BG.Studio Color Phone Call Screen App 安全漏洞

BG.Studio Color Phone Call Screen App BG.Studio com.asianmobile.callcolor is a color phone call screen app from BG.Studio. A security vulnerability exists in the BG.Studio Color Phone Call Screen App Android24 version that originates from allowing any application to send a crafted call via the...

PT-2025-3003 · Asianmobile · Com.Asianmobile.Callcolor

Name of the Vulnerable Software and Affected Versions: com.asianmobile.callcolor aka Color Phone Call Screen App version 24 for Android Description: The issue allows any application to place phone calls without user interaction by sending a crafted intent via the...

HK DEVERLOP: Personalize Your World Call Theme & Call Screen 安全漏洞

HK DEVERLOP: Personalize Your World Call Theme & Call Screen is a call theme screen from HK DEVERLOP: Personalize Your World. A security vulnerability exists in HK DEVERLOP: Personalize Your World Call Theme & Call Screen version 1.0.7 and earlier, which originates from a call that can be sent vi...

Wallfinity: Lovely Caller Theme iCaller Caller Theme & Dialer 安全漏洞

Wallfinity: Lovely Caller Theme iCaller Caller Theme & Dialer is a premium color caller screen and dialer from Wallfinity: Lovely Caller Theme. A security vulnerability exists in Wallfinity: Lovely Caller Theme iCaller Caller Theme & Dialer 1.1 and prior versions, which stems from a crafted inten...

PT-2025-2999 · Unknown · Com.Remi.Colorphone.Callscreen.Calltheme.Callerscreen

Name of the Vulnerable Software and Affected Versions: com.remi.colorphone.callscreen.calltheme.callerscreen aka Color Phone: Call Screen Theme versions through 21.1.9 for Android Description: The issue allows any application to place phone calls without user interaction by sending a crafted inte...

PT-2025-3002 · Unknown · Com.Callos14.Callscreen.Colorphone

Name of the Vulnerable Software and Affected Versions: com.callos14.callscreen.colorphone also known as iCall OS17 - Color Phone Flash versions 4.3 and earlier Description: The issue allows any application to place phone calls without user interaction by sending a crafted intent via the...

GHSA-R5J8-58V3-G23G

creationtimestamp| type| source ---|---|--- 2025-01-05 01:32:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/57 2025-01-05 01:35:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/79 2025-01-05 01:38:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/101...

Malicious code in api-demo-sample-lib4 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=-...

Apple iPadOS and iPhone OS Information Disclosure Vulnerability

iPadOS is Apple's mobile operating system for iPad devices, which is based on iOS and optimized for iPad. iPhone OS is Apple's operating system for iPhone and iPod touch. Apple iPadOS and iPhone OS suffer from an information disclosure vulnerability that originates from the possibility that a...

ASB-A-369103643

In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to launch arbitrary activities as the system UID due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...

CVE-2024-56717

creationtimestamp| type| source ---|---|--- 2024-12-29 09:07:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113735318485953258 2024-12-29 09:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3legom4ilkp2o 2024-12-29 10:41:18+00:00| seen|...

CVE-2024-13006

creationtimestamp| type| source ---|---|--- 2024-12-29 08:10:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113735093418778305 2024-12-29 08:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3leglafsctt2e 2024-12-29 09:50:59+00:00| seen|...

CVE-2024-12856

creationtimestamp| type| source ---|---|--- 2024-12-27 16:15:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecf5eb7so2l 2024-12-27 17:41:58+00:00| seen| https://t.me/cvedetector/13787 2024-12-27 18:19:54+00:00| seen|...

Malicious code in vesu_changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6834e9ec748ab087db6a8b6720dd7c18ab0652d965192663dae6ba0b7681c7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zoomapps-texteditor-vuejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b6be9c754c32184fac89d2d416b8d75cc15d7bb20219f8ace3c698d6e415fff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12130 Malicious code in nativescript-gainsight-px (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a623f285a8491c50ebbad0ad2a62988fbf68724329f6d7b0a7d30b1bf44ded73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12126 Malicious code in @awan_7715/model-viewer-space-opera (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e555e285993ff5179f3dad8424c83097053d02d6b4a91a72319eaabb6f1e6282 The OpenSSF Package Analysis project identified '@awan7715/model-viewer-space-opera' @ 1.1.1 npm as malicious. It is considered malicious becaus...

MAL-2024-12117 Malicious code in react-release-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3056b390e6fea55432a197cca0d614e66de98058a3e4b6087a547a66327ee6c5 The OpenSSF Package Analysis project identified 'react-release-manager' @ 1.1.3 npm as malicious. It is considered malicious because: - The...

North Korean Hackers Pull Off $308M Bitcoin Heist from Crypto Firm DMM Bitcoin

Japanese and U.S. authorities have formerly attributed the theft of cryptocurrency worth $308 million from cryptocurrency company DMM Bitcoin in May 2024 to North Korean cyber actors. "The theft is affiliated with TraderTraitor threat activity, which is also tracked as Jade Sleet, UNC4899, and Sl...