MAL-2025-47032 Malicious code in @liquid-web/app-services (npm)

The package @liquid-web/app-services was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2360336c035ddfac0df30665d2e803482a726fbf6c47738903b8d3b7eb6c248 Any computer that has this package installed or running should be considered...

Malicious code in @liquid-web/app-services (npm)

The package @liquid-web/app-services was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2360336c035ddfac0df30665d2e803482a726fbf6c47738903b8d3b7eb6c248 Any computer that has this package installed or running should be considered...

SAP Fiori App Manage Work Center Groups Cross-Site Request Forgery Vulnerability

SAP Fiori App Manage Work Center Groups is an enterprise application from SAP with the ability to manage and maintain work center groups. A cross-site request forgery vulnerability exists in SAP Fiori App Manage Work Center Groups, which stems from insufficient CSRF protection and can be exploite...

Flask App Builder 授权问题漏洞

Flask App Builder is a simple and fast application development framework by Daniel Vaz Gaspar Personal Developer. An authorization issue vulnerability exists in Flask App Builder versions prior to 4.8.1, which stems from not disabling the password reset feature when using a non-database...

Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methods

When Flask-AppBuilder is configured to use OAuth, LDAP, or other non-database authentication methods, the password reset endpoint remains registered and accessible, despite not being displayed in the user interface. This allows an enabled user to reset their password and be able to create JWT...

CVE-2025-10201

creationtimestamp| type| source ---|---|--- 2025-09-10 21:14:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyj5ontlzz2c 2025-09-12 02:38:22+00:00| seen| https://bsky.app/profile/secqube.com/post/3lymaa2yxoo2e 2025-09-19 18:51:31+00:00| seen|...

CVE-2025-54994

@akoskm/create-mcp-server-stdio is an MCP server starter kit that uses the StdioServerTransport. Prior to version 0.0.13, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. The MCP...

CVE-2025-10195

A vulnerability has been found in Seismic App 2.4.2 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component com.seismic.doccenter. Such manipulation leads to improper export of android application components. An attack has to be approached locally. The exploit...

CVE-2025-10159

creationtimestamp| type| source ---|---|--- 2025-09-10 00:59:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lygzrixjuo2r 2025-09-10 13:39:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lyie7kgfqy2z 2025-09-10 20:07:50+00:00| seen|...

CVE-2025-55998

A cross-site scripting XSS vulnerability in Smart Search & Filter Shopify and BigCommerce apps allows a remote attacker to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into several filter parameter...

CVE-2025-10195 Seismic App com.seismic.doccenter AndroidManifest.xml improper export of android application components

A vulnerability has been found in Seismic App 2.4.2 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component com.seismic.doccenter. Such manipulation leads to improper export of android application components. An attack has to be approached locally. The exploit...

CVE-2025-10195

CVE-2025-10195 affects Seismic App version 2.4.2 on Android, specifically the com.seismic.doccenter AndroidManifest.xml. The vulnerability arises from improper export of an Android component, enabling a local attack. Exploit appears publicly disclosed; vendor has not responded. Several sources co...

CVE-2025-10195 Seismic App com.seismic.doccenter AndroidManifest.xml improper export of android application components

A vulnerability has been found in Seismic App 2.4.2 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component com.seismic.doccenter. Such manipulation leads to improper export of android application components. An attack has to be approached locally. The exploit...

Linux Distros Unpatched Vulnerability : CVE-2016-3915

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - camera/src/camerametadata.c in the Camera service in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before...

Linux Distros Unpatched Vulnerability : CVE-2015-3879

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Media Player Framework in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, aka internal bug 23223325. CVE-2015-3879 No...

Linux Distros Unpatched Vulnerability : CVE-2016-3838

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Android 6.x before 2016-08-01 allows attackers to cause a denial of service loss of locked-screen 911 functionality via a crafted application that uses the...

Linux Distros Unpatched Vulnerability : CVE-2016-2477

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm-video-v4l2/vidc/vdec/src/omxvdecmsm8974.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01...

Linux Distros Unpatched Vulnerability : CVE-2016-3765

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - decoder/impeg2dbitstream.c in mediaserver in Android 6.x before 2016-07-01 allows attackers to obtain sensitive information from process memory or cause a denia...

Linux Distros Unpatched Vulnerability : CVE-2020-7018

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Elastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search interface. If a user is given the developer role, they will be able ...

PT-2025-37001

Name of the Vulnerable Software and Affected Versions: Seismic App version 2.4.2 Description: A vulnerability exists in Seismic App version 2.4.2 on Android due to improper export of android application components within the AndroidManifest.xml file of the com.seismic.doccenter component. This...