Junk Cleaner clears the clutter from your Android

Your phone is full again, and the warning appears at exactly the wrong moment. Suddenly you can't update apps, record a video, or save another photo. The cause is rarely one giant file. Storage disappears in a steady drizzle of leftovers: temporary files an app creates and forgets, caches that gr...

Malicious code in tinkoff-test-app-child-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46ce48be2d5927c06822c9e9497869a7da10c7b183b18df3c87c983863838ec8 On require of this package, platform.js reconstructs endpoint hostnames from split string arrays via.join"", downloads a platform-specific binary fro...

MAL-2026-12282 Malicious code in tinkoff-test-app-child-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46ce48be2d5927c06822c9e9497869a7da10c7b183b18df3c87c983863838ec8 On require of this package, platform.js reconstructs endpoint hostnames from split string arrays via.join"", downloads a platform-specific binary fro...

EUVD-2026-53294

A flaw was found in the Application Subscription controller multicluster-operators-subscription of Red Hat Advanced Cluster Management for Kubernetes ACM. A user with namespace-scoped "edit" privileges in an ACM hub namespace can create a Channel resource pointing to a Helm repository they contro...

CVE-2026-8029 SQL Injection Vulnerability in ZTE SmartLife App

The ZTE Smart Life app contains an SQL injection vulnerability that allows attackers to execute UNION SELECT statements to query sensitive data in the feedback.db database across tables, including user accounts, phone numbers, feedback content, and local debug log paths, thereby enabling the thef...

CVE-2026-71214

creationtimestamp| type| source ---|---|--- 2026-08-05 07:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117041727081914237 2026-08-05 07:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mscyzgcese2v 2026-08-05 09:24:05+00:00| seen|...

CVE-2026-9273

creationtimestamp| type| source ---|---|--- 2026-08-05 06:00:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/117041373701599609 2026-08-05 06:00:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msctyppdsc2t 2026-08-05 07:04:04+00:00| seen|...

QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer

Cybersecurity researchers have disclosed what has been described as a "long-standing supply chain attack" on QuickFox, a virtual private network VPN and network acceleration tool designed for overseas Chinese users. According to Fortinet FortiGuard Labs, the supply chain attack has been ongoing...

[SECURITY] Fedora 44 Update: perl-PAR-Packer-1.064-6.fc44

This module implements the App::Packer::Backend interface, for generating stand-alone executables, perl scripts and PAR files...

Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751

Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751 The information on this page is being provided to you on an "AS IS" and "AS-AVAILABLE" basis. The issues described on this page may or may not impact your systems. Cloud Software Group, Inc. and its subsidiaries collectively, "Clou...

EUVD-2026-53009

A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...

CVE-2026-18853

A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...

PT-2026-68219

Name of the Vulnerable Software and Affected Versions Progress MarkLogic Server versions prior to 11.3.6 Progress MarkLogic Server versions prior to 12.0.3 Description An authentication bypass exists in the ODBC App Server. This flaw allows an unauthenticated remote attacker to circumvent passwor...

CVE-2025-63823

My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication module, which allows remote attackers to bypass authentication and gain unauthorized access to user accounts via predictable OTP values...

CVE-2026-18853: Improper Limitation of a Pathname to a Restricted Directory

A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...

CVE-2026-9192: Improper Authentication

An authentication bypass vulnerability in the ODBC App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote attacker to bypass password verification and execute queries with the privileges of any named user known to the server, including administrators...

CVE-2025-63822

SirenGPS Android Application 2.19.44 is vulnerable to Incorrect Access Control. An authenticated attacker can manipulate user identifier parameters to bypass authorization controls and gain unauthorized READ and WRITE access to other users' personal information. The API fails to validate that the...

CVE-2025-63822

The SirenGPS Android Application 2.19.44 is vulnerable to Incorrect Access Control . An authenticated attacker can manipulate user identifier parameters to bypass authorization controls, as the API fails to validate if the requesting user is authorized to access the target user's data. This flaw ...

CVE-2025-63823

The My Safetipin Android Application 5.2.1 is affected by CVE-2025-63823 , which involves hardcoded credentials within the authentication module. This flaw allows remote attackers to bypass authentication and gain unauthorized access to user accounts by leveraging predictable OTP values . No spec...

CVE-2026-9190: Inconsistent Interpretation of HTTP Requests

An HTTP request smuggling vulnerability in the HTTP App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker to bypass authentication and authorization checks, hijack a legitimate user's session, or capture credentials. The vulnerability occurs when a crafted HTTP...