CVE-2025-14401 PDFsam Enhanced App Out-Of-Bounds Read Remote Code Execution Vulnerability

PDFsam Enhanced App Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDFsam Enhanced. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

CVE-2025-14401

CVE-2025-14401 affects PDFsam Enhanced App. The issue is an out-of-bounds read in the handling of App objects caused by insufficient validation of user-supplied data, which can permit executing code in the current process. Exploitation requires user interaction (the target must visit a malicious ...

New MacSync Stealer Disguised as Trusted Mac App Hunts Saved Passwords

Jamf security experts have found a new version of MacSync Stealer. Disguised as a zk-call app, it uses official notarization to bypass security and steal your saved passwords...

CVE-2025-33223

creationtimestamp| type| source ---|---|--- 2025-12-23 17:44:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3maocgfoola2p 2025-12-23 18:33:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maof5qe7of2y 2025-12-24 00:07:24+00:00| seen|...

CVE-2025-65817

LSC Smart Connect Indoor IP Camera 1.4.13 contains a RCE vulnerability in startapp.sh...

Malicious Package

Overview secure-docs-app is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this this package'...

CVE-2023-53965

creationtimestamp| type| source ---|---|--- 2025-12-23 08:44:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3maneb2l5ai27...

CVE-2025-14401: Out-of-bounds Read

PDFsam Enhanced App Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDFsam Enhanced. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

PDFsam Enhanced 缓冲区错误漏洞

PDFsam Enhanced is a PDF editing and management tool from PDFsam, Inc. PDFsam Enhanced suffers from a buffer error vulnerability that stems from a lack of validation of user-supplied data when processing App objects, which could lead to out-of-bounds reads and remote code execution...

CVE-2023-53981

creationtimestamp| type| source ---|---|--- 2025-12-22 23:45:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mamg3vdpcl2b 2025-12-22 23:46:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mamg7cgt262x...

CVE-2025-65817

LSC Smart Connect Indoor IP Camera 1.4.13 contains a RCE vulnerability in startapp.sh...

CVE-2025-65817

LSC Smart Connect Indoor IP Camera 1.4.13 contains a RCE vulnerability in startapp.sh...

Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple node modules (CVE-2025-64718, CVE-2025-64756, CVE-2025-13466 & CVE-2025-65945)

Summary IBM App Connect Enterprise Connector Discovery and OpenAPI Editor, IBM App Connect Enterprise Discovery Connectors and IBM App Connect Enterprise runtime are vulnerable to multiple vulnerabilities due to node modules js-yaml, glob, body-parser and jws. Vulnerability Details...

CVE-2025-11544

creationtimestamp| type| source ---|---|--- 2025-12-22 07:24:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115762020342462503 2025-12-22 07:36:05+00:00| seen| https://infosec.exchange/users/offseq/statuses/115762067143750160 2025-12-22 07:36:06+00:00| seen|...

CVE-2025-65817

LSC Smart Connect Indoor IP Camera 1.4.13 contains a RCE vulnerability in startapp.sh...

LSC Smart Connect Indoor IP Camera 安全漏洞

LSC Smart Connect Indoor IP Camera is an indoor IP camera driver from LSC Smart Connect. A security vulnerability exists in LSC Smart Connect Indoor IP Camera version 1.4.13, which stems from a remote code execution vulnerability in startapp.sh...

WordPress E-Invoice App Malaysia plugin <= 1.3.0 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Rapid0nion in WordPress Plugin E-Invoice App Malaysia versions = 1.3.0...

CVE-2025-9808

creationtimestamp| type| source ---|---|--- 2025-12-20 21:03:01+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mah44ete6i2t...

CVE-2023-53941

EasyPHP Webserver 14.1 contains an OS command injection vulnerability that allows unauthenticated attackers to execute arbitrary system commands by injecting malicious payloads through the appservicecontrol parameter. Attackers can send POST requests to /index.php?zone=settings with crafted...

CVE-2025-67712 HTML injection issue in ArcGIS Web App Builder

There is an HTML injection issue in Esri ArcGIS Web AppBuilder developer edition versions prior to 2.30 that allows a remote, unauthenticated attacker to potentially entice a user to click a link that causes arbitrary HTML to render in a victim's browser. There is no evidence of JavaScript...