CVE-2025-30516 Unauthorized Notification Exposure in Mobile App Under Specific Conditions

Mattermost Mobile Apps versions =2.25.0 fail to terminate sessions during logout under certain conditions e.g. poor connectivity, allowing unauthorized users on shared devices to access sensitive notification content via continued mobile notifications...

CVE-2025-32077

creationtimestamp| type| source ---|---|--- 2025-04-11 16:51:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11464 2025-04-11 19:43:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmkrosjlv426 2025-04-11 20:38:18+00:00| seen| https://t.me/cvedetector/22770...

CVE-2023-42969

CVE-2023-42969 describes a sandbox escape whereby an app may break out of its sandbox due to improper handling of caches. Affected platforms include iOS and iPadOS prior to 17, and macOS prior to the listed versions ( Sonoma 14, Ventura 13.6, Monterey 12.7). Apple fixed the issue in iOS 17/iPadOS...

CVE-2025-27693

creationtimestamp| type| source ---|---|--- 2025-04-02 03:01:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llsfiyksa42m 2025-04-02 04:07:10+00:00| seen| https://t.me/cvedetector/21841...

CVE-2025-30458

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to read files outside of its sandbox...

PT-2025-13970 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 Description: The issue allows a sandboxed app to potentially access sensitive user data in system logs. This is due to inadequate redaction of sensitive information. The estimated number of potentially affected...

CVE-2025-20233

In the Splunk App for Lookup File Editing versions below 4.0.5, a script in the app used the chmod and makedirs Python functions in a way that resulted in overly broad read and execute permissions. This could lead to improper access control for a low-privileged user...

Xiaomi Mi Connect Service APP 安全漏洞

Xiaomi Mi Connect Service APP is an application from China's Xiaomi Xiaomi that is used to enable connectivity and interaction between Xiaomi devices, which helps users to quickly connect and manage a variety of Xiaomi smart devices to enable data transfer and collaborative work between devices. ...

A week in security (March 10 – March 16)

Last week on Malwarebytes Labs: Research on iOS apps shows widespread exposure of secrets Don’t let your kids on Roblox if you’re not comfortable, says Roblox CEO Update your iPhone now: Apple patches vulnerability used in "extremely sophisticated attacks" The dark side of sports betting: How...

CVE-2025-2342

creationtimestamp| type| source ---|---|--- 2025-03-16 16:46:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7715 2025-03-16 18:53:03+00:00| seen| https://t.me/cvedetector/20412 2025-03-16 19:30:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkjeufh57...

CVE-2025-1773

creationtimestamp| type| source ---|---|--- 2025-03-15 04:45:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7663 2025-03-15 06:55:36+00:00| seen| https://t.me/cvedetector/20349 2025-03-15 08:55:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkfqwncqot2h...

Research on iOS apps shows widespread exposure of secrets

Researchers found that most of the apps available on Apple’s App Store leak at least one hard-coded secret. The researchers looked at 156,000 iOS apps and discovered more than 815,000 hardcoded secrets, including very sensitive secrets like keys to cloud storage, various Application Programming...

CVE-2024-52905

creationtimestamp| type| source ---|---|--- 2025-03-10 16:38:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7010 2025-03-10 19:02:32+00:00| seen| https://t.me/cvedetector/19967 2025-03-10 19:45:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk2cvzvlzd2e...

CVE-2024-46433

creationtimestamp| type| source ---|---|--- 2025-02-10 19:16:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtu7k5dt72x 2025-02-10 21:16:34+00:00| seen| https://t.me/cvedetector/17589 2025-02-10 22:10:15+00:00| seen|...

CVE-2024-36437

The com.enflick.android.TextNow aka TextNow: Call + Text Unlimited application 24.17.0.2 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.enflick.android.TextNow.activities.DialerActivity...

CVE-2025-21680

creationtimestamp| type| source ---|---|--- 2025-01-31 12:16:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzy3yvwps2j 2025-01-31 15:22:32+00:00| seen| https://t.me/cvedetector/16936 2025-06-14 13:51:03+00:00| seen|...

CVE-2024-12267

creationtimestamp| type| source ---|---|--- 2025-01-31 11:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzuouktwn2b 2025-01-31 12:52:02+00:00| seen| https://t.me/cvedetector/16926 2025-01-31 13:15:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3650...

Google Bans 158,000 Malicious Android App Developer Accounts in 2024

Google said it blocked over 2.36 million policy-violating Android apps from being published to the Google Play app marketplace in 2024 and banned more than 158,000 bad developer accounts that attempted to publish such harmful apps. The tech giant also noted it prevented 1.3 million apps from...

CVE-2023-37011

creationtimestamp| type| source ---|---|--- 2025-01-22 15:16:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdnxa4rk22h...

CVE-2025-22706

creationtimestamp| type| source ---|---|--- 2025-01-21 14:16:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgb254mppz2t 2025-01-21 16:08:09+00:00| seen| https://t.me/cvedetector/15971...