Lucene search
+L

31562 matches found

CNNVD
CNNVD
added 2025/12/15 12:00 a.m.21 views

Line Corporation Line Client For Ios 安全漏洞

Line Corporation Line Client For Ios is a communication application from Line Corporation, Japan. A security vulnerability exists in Line Corporation Line Client For Ios prior to version 14.14, which originates from in-app browser address bar spoofing and may lead to phishing attacks...

4.3CVSS6.6AI score0.00207EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/15 12:00 a.m.11 views

PT-2025-51204

LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct phishing attacks by...

5.4CVSS6.6AI score0.00174EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/15 12:00 a.m.8 views

LINE client for Android 安全漏洞

LINE client for Android is an instant messaging application by South Korean company LINE. A security vulnerability exists in LINE client for Android prior to version 14.20, which originates from in-app browser UI spoofing and may lead to phishing attacks...

5.4CVSS6.6AI score0.00174EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/15 12:00 a.m.10 views

PT-2025-51189

A flaw has been found in Smartbit CommV Smartschool App up to 10.4.4. Impacted is an unknown function of the component be.smartschool.mobile.SplashActivity. Executing manipulation can lead to path traversal. The attack requires local access. The exploit has been published and may be used. The...

4.8CVSS5.9AI score0.00194EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/12/15 12:00 a.m.8 views

Smartbit CommV Smartschool App 路径遍历漏洞

Smartbit CommV Smartschool App is a school management software from the Belgian company Smartbit CommV. A path traversal vulnerability exists in Smartbit CommV Smartschool App version 10.4.4 and earlier, which stems from a path traversal issue in the component be.smartschool.mobile.SplashActivity...

4.8CVSS5AI score0.00194EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/15 12:00 a.m.7 views

atlaszz AI Photo Team Galleryit App 路径遍历漏洞

The atlaszz AI Photo Team Galleryit App is an image delivery tool from atlaszz AI Photo Team, Inc. A path traversal vulnerability exists in atlaszz AI Photo Team Galleryit App version 1.3.8.2, which stems from a path traversal issue in the component gallery.photogallery.pictures.vault.album...

4.8CVSS5AI score0.00194EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/15 12:00 a.m.11 views

Line Corporation Line Client For Ios 安全漏洞

Line Corporation Line Client For Ios is a communication application from Line Corporation, Japan. A security vulnerability exists in Line Corporation Line Client For Ios prior to version 15.19, which stems from an inconsistency between the navigation state and the in-app browser UI, which may lea...

4.3CVSS6.7AI score0.00172EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/15 12:00 a.m.12 views

PT-2025-51207

Name of the Vulnerable Software and Affected Versions LINE client for iOS versions prior to 15.19 Description The LINE client for iOS is susceptible to a UI spoofing issue stemming from inconsistencies between the application's navigation state and the user interface of the in-app browser. This...

4.3CVSS6.3AI score0.00172EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/12/15 12:00 a.m.8 views

Municorn FAX App 路径遍历漏洞

Municorn FAX App is a mobile fax application from Municorn Cyprus. A path traversal vulnerability exists in Municorn FAX App version 3.27.0, which stems from a path traversal issue in the component biz.faxapp.app...

5.3CVSS5.6AI score0.00194EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/15 12:00 a.m.8 views

CTCMS 代码注入漏洞

CTCMS Chibi CMS is a video content management system from China Chibi CMS CTCMS company. A code injection vulnerability exists in CTCMS 2.1.2 and earlier versions, which originates from improper handling of the parameter CTAppPaytype in the Save function in the file /ctcms/libs/CtApp.php, which m...

7.2CVSS5.4AI score0.00448EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/12/15 12:00 a.m.10 views

PT-2025-51186

A weakness has been identified in atlaszz AI Photo Team Galleryit App 1.3.8.2 on Android. This affects an unknown part of the component gallery.photogallery.pictures.vault.album. This manipulation causes path traversal. The attack needs to be launched locally. The exploit has been made available ...

4.8CVSS6.3AI score0.00194EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/12/15 12:00 a.m.8 views

LINE client for Android 安全漏洞

LINE client for Android is an instant messaging application by South Korean company LINE. A security vulnerability exists in LINE client for Android versions 13.8 through 15.5, which originates from in-app browser UI spoofing and may lead to phishing attacks...

4.7CVSS6.6AI score0.00172EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/15 12:00 a.m.8 views

PT-2025-51187

A security vulnerability has been detected in Municorn FAX App 3.27.0 on Android. This vulnerability affects unknown code of the component biz.faxapp.app. Such manipulation leads to path traversal. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used...

5.3CVSS6.5AI score0.00194EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/12/15 12:00 a.m.12 views

PT-2025-51205

The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could allow attackers to execute malicious JavaScript within iframes while displaying trusted URLs, enabling phishing attacks through overlaid malicious content...

4.3CVSS6.9AI score0.00207EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/15 12:00 a.m.9 views

PT-2025-51203

LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific layout could obscure the full-screen warning prompt, potentially allowing attackers to conduct phishing attacks...

3.4CVSS6.7AI score0.00172EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2025/12/14 10:26 p.m.164 views

CA2-Secure_Web_App

No d...

7AI score
SaveExploits0
GithubExploit
GithubExploit
added 2025/12/14 5:18 p.m.236 views

Exploit for Deserialization of Untrusted Data in Facebook React

Next.Js React Server Components RSC Vulnerabilities This re...

10CVSS8.8AI score0.99802EPSS
SaveExploits397
RedhatCVE
RedhatCVE
added 2025/12/13 10:01 p.m.13 views

CVE-2025-43520

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may be able to cause...

5.5CVSS6.7AI score0.00432EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/12/13 10:00 p.m.13 views

CVE-2025-43532

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing malicious data may lead to unexpect...

2.8CVSS5.9AI score0.0027EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/13 10:00 p.m.22 views

CVE-2025-43473

This issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data...

5.5CVSS6AI score0.00197EPSS
SaveExploits0References1
Rows per page
Query Builder