31706 matches found
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
CVE-2025-10426
creationtimestamp| type| source ---|---|--- 2025-09-15 05:57:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyu4ql7xf52f 2025-09-15 07:17:54+00:00| seen| https://gist.github.com/Darkcrai86/035d1aec046141e74dee8fb01cfe6de6...
PT-2025-37819
Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15.7 macOS versions prior to Sonoma 14.8 macOS versions prior to Tahoe 26 Description: A parsing issue in the handling of directory paths exists. This issue could allow an application to access sensitive user...
Apple macOS Tahoe 安全漏洞
Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...
PT-2025-37785
Name of the Vulnerable Software and Affected Versions: macOS versions prior to Tahoe 26 Description: A permissions issue allowed an app to access protected user data. This issue was addressed with additional restrictions. Recommendations: Update to macOS Tahoe 26...
PT-2026-43419
Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7 macOS Sonoma versions prior to 14.8 macOS Tahoe versions prior to 26 Description A permissions issue exists where an application may be able to modify protected parts of the file system. Recommendations...
PT-2025-37821
Name of the Vulnerable Software and Affected Versions: macOS versions prior to Tahoe 26 visionOS versions prior to 26 Description: A permissions issue existed that allowed a malicious application to potentially gain root privileges due to insufficient restrictions. Recommendations: Update macOS t...
PT-2026-43418
Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7 macOS Sonoma versions prior to 14.8 macOS Tahoe versions prior to 26 Description A logic issue involving insufficient validation may allow a malicious application to access sensitive user data...
Apple macOS和Apple visionOS 安全漏洞
Apple macOS and Apple visionOS are both products of Apple Inc. Apple macOS is a specialized operating system developed for Mac computers. apple visionOS is an operating system for AR glasses. A security vulnerability exists in Apple macOS Tahoe prior to version 26 and Apple visionOS prior to...
PT-2025-37826
Name of the Vulnerable Software and Affected Versions: macOS versions prior to Tahoe 26 Description: An issue existed where an app could potentially access sensitive user data due to insufficient sandbox restrictions. Recommendations: Update to macOS Tahoe 26...
PT-2025-37853
Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sonoma 14.8 macOS versions prior to Tahoe 26 Description: A privacy issue was addressed by relocating sensitive data. An application may be able to access protected user data. Recommendations: Update to macOS Sonoma...
CVE-2025-10414
creationtimestamp| type| source ---|---|--- 2025-09-14 23:01:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lytfimvgob2t 2025-09-15 06:19:53+00:00| seen| https://gist.github.com/Darkcrai86/4862e9d617bdd83dd9007b51c1a5da02...
exploit_me
This is a vulnerable ARM/AARCH64 application, specifically designed for a CTF Capture The Flag style exploitation tutorial. The application is written in C and is intended to demonstrate various types of vulnerabilities, including integer overflow, stack overflow, array overflow, off-by-one, stac...
CVE-2025-58781
WTW-EAGLE App does not properly validate server certificates, which may allow a man-in-the-middle attacker to monitor encrypted traffic...
CVE-2025-56467
An issue was discovered in AXIS BANK LIMITED Axis Mobile App 9.9 that allows attackers to obtain sensitive information without a UPI PIN, such as account information, balances, transaction history, and unspecified other information. NOTE: the Supplier's perspective is that this is an intended...
CRMEB 授权问题漏洞
CRMEB is a Java mall system of CRMEB open source. An authorization issue vulnerability exists in CRMEB 5.6.1 and earlier versions, which stems from incorrect manipulation of the parameter ID of the component Administrator Password Handler in the file...
Malicious code in pokemon-app-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f6c79d8e736c89d71abb3438a63c2b22868d2a31b61125c1f641c53fb0da2909 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
CVE-2025-39797
creationtimestamp| type| source ---|---|--- 2025-09-12 19:09:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lynxmekqia2c 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...
CVE-2025-56467
An issue was discovered in AXIS BANK LIMITED Axis Mobile App 9.9 that allows attackers to obtain sensitive information without a UPI PIN, such as account information, balances, transaction history, and unspecified other information. NOTE: the Supplier's perspective is that this is an intended...