38103 matches found
Spyware Disguised as Signal and ToTok Apps Targets UAE Android Users
ESET warns of fake Signal and ToTok apps spreading Android spyware in the UAE, stealing contacts, messages, and chat backups from users...
CVE-2025-59405
The Flock Safety Peripheral com.flocksafety.android.peripheral application 7.38.3 for Android installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices contains a cleartext DataDog API key within in its codebase. Because application binaries can be trivially decompil...
CVE-2025-59407
The Flock Safety DetectionProcessing com.flocksafety.android.objects application 6.35.33 for Android installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices bundles a Java Keystore flockrye.bks along with its hardcoded password flockhibiki17 in its code. The keysto...
PT-2025-40945
Name of the Vulnerable Software and Affected Versions YoSmart YoLink ecosystem through 2025-10-02 YoLink Hub 0382 YoLink Mobile Application version 1.40.41 YoLink MQTT Broker Description Components of the YoSmart YoLink ecosystem utilize unencrypted MQTT for internet communication. This allows an...
CVE-2025-59451
The YoSmart YoLink application through 2025-10-02 has session tokens with unexpectedly long lifetimes...
CVE-2025-11331: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in IdeaCMS up to 1.8. The impacted element is an unknown function of the file app/common/logic/admin/Config.php of the component Website Name Handler. Performing manipulation of the argument 网站名称 results in command injection. The attack may be initiated remotely. The...
KUNO 代码问题漏洞
KUNO is a blogging application by the individual developer XueMian ICT.RUN. A code issue vulnerability exists in KUNO versions prior to 1.3.15, which stems from the media module allowing the upload of specially crafted SVG files, which could lead to a server-side request forgery attack...
CVE-2025-59448
CVE-2025-59448 concerns the YoSmart YoLink ecosystem, where components including the YoLink Hub 0382, YoLink Mobile Application 1.40.41, and YoLink MQTT Broker communicate over the internet using unencrypted MQTT. The vulnerability arises from insecure transmission, allowing an attacker who can m...
vulnerable-node-app
This is an educational sandbox demonstrating common web applicat...
CVE-2025-39932
creationtimestamp| type| source ---|---|--- 2025-10-04 12:27:35+00:00| seen| https://bsky.app/profile/potato.software/post/3m2elfwxtzo2e 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...
CVE-2025-10729
creationtimestamp| type| source ---|---|--- 2025-10-04 00:03:50+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m2dbtxrddk2a 2025-10-07 05:15:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m2leongtgs2a 2025-10-08 07:00:08+00:00| seen|...
EUVD-2023-28619
Malicious code in bioql PyPI...
EUVD-2023-45618
Malicious code in bioql PyPI...
EUVD-2025-24941
Malicious code in bioql PyPI...
EUVD-2025-6674
Malicious code in bioql PyPI...
EUVD-2024-30367
Malicious code in bioql PyPI...
EUVD-2023-37365
Malicious code in bioql PyPI...
EUVD-2024-37532
Malicious code in bioql PyPI...