37414 matches found
CVE-2025-63289
Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryptionhelper.dart file...
PT-2025-46702
Name of the Vulnerable Software and Affected Versions Lenovo App Store affected versions not specified Description An improper permissions issue exists in Lenovo App Store that may allow a locally authenticated user to run code with higher privileges when installing an application. Recommendation...
Lenovo多款产品 安全漏洞
Lenovo App Store and others are products of the Chinese company Lenovo Lenovo.Lenovo App Store is a desktop application.Lenovo Browser is a browser.ws and others are WebSockets open source products.ws is a Node.js WebSocket library.Lenovo PC Lenovo PC Manager is a PC management software. A securi...
PT-2025-46669
Name of the Vulnerable Software and Affected Versions Sogexia Android App versions SDK 35 through SDK 32 Description The Sogexia Android App contains hardcoded encryption keys within the encryption helper.dart file. These keys compromise the confidentiality of data encrypted by the application...
Sogexia Android App 安全漏洞
Sogexia Android App is a payment account management mobile application from Sogexia Luxembourg. A security vulnerability exists in Sogexia Android App that originates from the inclusion of hard-coded encryption keys in the encryptionhelper.dart file...
CVE-2025-63289: Use of Hard-coded Cryptographic Key
Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryptionhelper.dart file...
CVE-2025-63289
The Sogexia Android App (a payment account management mobile application) contains a vulnerability caused by hardcoded encryption keys within the encryption_helper.dart file. This flaw compromises the confidentiality of data encrypted by the application. The issue affects versions from SDK 32 thr...
CVE-2025-10495: Improper Certificate Validation
A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code...
PT-2025-46690
Name of the Vulnerable Software and Affected Versions Lenovo PC Manager affected versions not specified Lenovo App Store affected versions not specified Lenovo Browser affected versions not specified Lenovo Legion Zone affected versions not specified Description A potential security issue has bee...
CVE-2025-8485: Incorrect Default Permissions
An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of an application...
The vulnerability of the AppManagementController.appUpgradeAction() function in the software for remote monitoring with virtual private network capabilities from Advantech WebAccess/VPN allows a hacker to execute arbitrary commands on behalf of the web server user (www-data).
The vulnerability of the AppManagementController.appUpgradeAction function in software for remote monitoring with Advantech WebAccess/VPN virtual private network capabilities exists due to the failure to address the issues related to special elements used in the operating system command set...
The vulnerability of the App-Bound Encryption component in Google Chrome and Microsoft Edge browsers allows a hacker to gain access to confidential information.
The vulnerability of the App-Bound Encryption component in Google Chrome and Microsoft Edge is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow an attacker to gain access to confidential information...
EUVD-2025-74043
ACAP applications can gain elevated privileges due to improper input validation, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim ...
kernel: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()
In the Linux kernel, the following vulnerability has been resolved: nfp: bpf: Add check for nfpappctrlmsgalloc Add check for the return value of nfpappctrlmsgalloc in nfpbpfcmsgalloc to prevent null pointer dereference...
Malicious code in colonial_worm-apptea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1377b9c2c58d800c2f9562461e7adb356e0c1b93a1774fa1e4ff1167ab54ecdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in magnetic_tuna-appteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2f22e8e6b7f218f3ca0a32e5f7bfabc9c92df486ff2723d7384b1ceb901fa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-76935
Malicious code in evolutionarytapir-appteadev npm...
CVE-2025-5454
An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker...
CVE-2025-6779
CVE-2025-6779 affects Axis devices running Axis OS where an ACAP configuration file has improper permissions. The underlying issue could permit command injection and privilege escalation, but exploitation is contingent on the device being configured to allow unsigned ACAP applications and an atta...
CVE-2025-6298
ACAP applications can gain elevated privileges due to improper input validation, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim ...