CVE-2024-57032

creationtimestamp| type| source ---|---|--- 2025-01-17 20:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxmdzxx5h2f 2025-01-17 20:44:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfxnxg5co62h 2025-01-17 21:48:57+00:00| seen|...

CVE-2025-23947

creationtimestamp| type| source ---|---|--- 2025-01-16 21:20:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7jgiqqo2t 2025-01-16 22:56:09+00:00| seen| https://t.me/cvedetector/15645 2025-01-17 21:57:06+00:00| published-proof-of-concept|...

CVE-2024-54540

CVE-2024-54540 affects Apple Music for Windows. The issue allows processing maliciously crafted web content to disclose internal app states. Root cause: insufficient input sanitization; fix applied in Apple Music 1.5.0.152 for Windows. Affected: Apple Music (Windows 10/11 platforms). Status: patc...

CVE-2024-49568

creationtimestamp| type| source ---|---|--- 2025-01-11 13:06:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1313 2025-01-11 13:16:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs42tzpb2f 2026-03-19 00:00:00+00:00| seen|...

Candy Crush, Tinder, MyFitnessPal: See the Thousands of Apps Hijacked to Spy on Your Location

A hack of location data company Gravy Analytics has revealed which apps are—knowingly or not—being used to collect your information behind the scenes...

CVE-2025-22512

creationtimestamp| type| source ---|---|--- 2025-01-07 16:17:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62eogja622 2025-01-07 16:42:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/472...

CVE-2023-45002

creationtimestamp| type| source ---|---|--- 2025-01-02 12:08:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113758678603663960 2025-01-02 12:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ler2jc2hcf2i 2025-01-06 20:48:11+00:00|...

CVE-2024-56597

creationtimestamp| type| source ---|---|--- 2024-12-27 15:17:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecbvc4gxw2a 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...

CVE-2024-1609

In OPPOStore iOS App, there's a possible escalation of privilege due to improper input validation...

CVE-2024-53150

creationtimestamp| type| source ---|---|--- 2024-12-24 11:49:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113707645580068170 2024-12-24 12:15:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le2gddx3t72i 2024-12-24 14:24:23+00:00| seen|...

CVE-2024-12883

creationtimestamp| type| source ---|---|--- 2024-12-21 13:06:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113690960550659335 2024-12-21 13:15:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldsybdcz6s2c 2024-12-21 15:19:54+00:00| seen|...

Testing the security of CCTV systems

TL;DR CCTV is often overlooked; ‘shadow tech’ whose security isn’t as carefully reviewed as core IT assets It is often a responsibility for facilities managers who may have little experience of cyber security Security of the hardware and software of some CCTV camera brands is sorely lacking A...

CVE-2024-44254

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, watchOS 11.1. An app may be able to access sensitive user data...

ASB-A-336976105

In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation feature by updating the attestation keys of all installed apps due to improper input validation. This could lead to local denial of service with no additional...

CVE-2024-45045

Collabora Online is a collaborative online office suite based on LibreOffice technology. In the mobile Android/iOS device variants of Collabora Online it was possible to inject JavaScript via url encoded values in links contained in documents. Since the Android JavaScript interface allows access ...

app.4schools.net Cross Site Scripting vulnerability OBB-3958019

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-40096

The com.cascadialabs.who aka Who - Caller ID, Spam Block application 15.0 for Android places sensitive information in the system log...

CVE-2024-40775

CVE-2024-40775 describes a downgrade issue addressed by adding code-signing restrictions. The vulnerability could allow an app to leak sensitive user information. Apple fixed the issue in macOS Sonoma 14.6, macOS Monterey 12.7.6, and macOS Ventura 13.6.8. The provided connected documents confirm ...

CVE-2024-39886

TONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel. Since TONE store App communicates with TONE store website in cleartext, a man-in-the-middle attack may allow an attacker to obtain and/or alter communications of the affected App...

CVE-2024-39886

TONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel. Since TONE store App communicates with TONE store website in cleartext, a man-in-the-middle attack may allow an attacker to obtain and/or alter communications of the affected App...