Splunk Enterprise 9.2 < 9.2.10, 9.3 < 9.3.8, 9.4 < 9.4.6, 10.0 < 10.0.2 (SVD-2025-1208)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2025-1208 advisory. - In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and versions below 3.9.10, 3.8.58 and 3.7.28 of the...

Next.js Framework React Server Components Remote Code Execution (CVE-2025-55182)

The Next.js Framework on the remote host is affected by a remote code execution vulnerability: - A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel,...

CVE-2025-13633

creationtimestamp| type| source ---|---|--- 2025-12-02 23:04:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m722inbymx2s 2025-12-03 08:04:12+00:00| seen| https://gist.github.com/Darkcrai86/2944d00f9caf1048347470a9ce26d896 2025-12-03 13:30:20+00:00| seen|...

EUVD-2025-200250

A security vulnerability has been detected in Rareprob HD Video Player All Formats App 12.1.372 on Android. Impacted is an unknown function of the component com.rocks.music.videoplayer. The manipulation leads to path traversal. The attack needs to be performed locally. The exploit has been...

CVE-2025-13876 Rareprob HD Video Player All Formats App com.rocks.music.videoplayer path traversal

A security vulnerability has been detected in Rareprob HD Video Player All Formats App 12.1.372 on Android. Impacted is an unknown function of the component com.rocks.music.videoplayer. The manipulation leads to path traversal. The attack needs to be performed locally. The exploit has been...

CVE-2025-10971

creationtimestamp| type| source ---|---|--- 2025-12-02 08:34:55+00:00| seen| https://infosec.exchange/users/offseq/statuses/115649052276359191 2025-12-02 08:34:57+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m6yjwalrpr2b...

CVE-2025-66022

FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to version 1.7.1, an extension execution path in Faction’s extension framework permits untrusted extension code to execute arbitrary system commands on the server when a lifecycle hook is invoked, resulting in remote cod...

CVE-2025-10971 Insecure Storage of Sensitive Information

Insecure Storage of Sensitive Information vulnerability in MeetMe on iOS, Android allows Retrieve Embedded Sensitive Data. This issue affects MeetMe: through v2.2.5...

CVE-2025-10971

CVE-2025-10971 describes an insecure storage of sensitive information in MeetMe on iOS and Android, allowing retrieval of embedded sensitive data. Affected: MeetMe versions up to 2.2.5. The CVSS 4.0 vector indicates a LOCAL attack with HIGH impact to confidentiality, integrity, and a Low impact t...

CVE-2025-58483

Improper export of android application components in Galaxy Store for Galaxy Watch prior to version 1.0.06.29 allows local attacker to install arbitrary application on Galaxy Store...

CVE-2025-21080

Improper export of android application components in Dynamic Lockscreen prior to SMR Dec-2025 Release 1 allows local attackers to access files with Dynamic Lockscreen's privilege...

MeetMe 安全漏洞

MeetMe is a dating software from MeetMe, Inc. A security vulnerability exists in MeetMe version 2.2.5 and prior versions, which stems from insecure storage of sensitive information and could lead to the retrieval of embedded sensitive data...

PT-2025-48652

Insecure Storage of Sensitive Information vulnerability in MeetMe on iOS, Android allows Retrieve Embedded Sensitive Data. This issue affects MeetMe: through v2.2.5...

CVE-2025-65793

creationtimestamp| type| source ---|---|--- 2025-12-01 18:39:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6x3abqkhp2n...

Malicious code in hpi-porsche-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89589737b4001caa57e131f557999bed39bd5bdc13de932d5988f194508cfc7b The package hpi-porsche-app was found to contain malicious code...

EUVD-2025-200059

Malicious code in hpi-porsche-app npm...

MAL-2025-191506 Malicious code in animation-debug-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8de5120a99a3428e311006c153a98bf97b0c46f7c9c633f241f75896adfe219 The package animation-debug-app was found to contain malicious code...

Malicious code in animation-debug-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8de5120a99a3428e311006c153a98bf97b0c46f7c9c633f241f75896adfe219 The package animation-debug-app was found to contain malicious code...

EUVD-2025-200063

Malicious code in animation-debug-app npm...

MAL-2025-191510 Malicious code in hpi-porsche-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89589737b4001caa57e131f557999bed39bd5bdc13de932d5988f194508cfc7b The package hpi-porsche-app was found to contain malicious code...