CVE-2025-54994

@akoskm/create-mcp-server-stdio is an MCP server starter kit that uses the StdioServerTransport. Prior to version 0.0.13, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. The MCP...

CVE-2025-10195

A vulnerability has been found in Seismic App 2.4.2 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component com.seismic.doccenter. Such manipulation leads to improper export of android application components. An attack has to be approached locally. The exploit...

CVE-2025-10159

creationtimestamp| type| source ---|---|--- 2025-09-10 00:59:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lygzrixjuo2r 2025-09-10 13:39:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lyie7kgfqy2z 2025-09-10 20:07:50+00:00| seen|...

CVE-2025-55998

A cross-site scripting XSS vulnerability in Smart Search & Filter Shopify and BigCommerce apps allows a remote attacker to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into several filter parameter...

CVE-2025-10195 Seismic App com.seismic.doccenter AndroidManifest.xml improper export of android application components

A vulnerability has been found in Seismic App 2.4.2 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component com.seismic.doccenter. Such manipulation leads to improper export of android application components. An attack has to be approached locally. The exploit...

CVE-2025-10195

CVE-2025-10195 affects Seismic App version 2.4.2 on Android, specifically the com.seismic.doccenter AndroidManifest.xml. The vulnerability arises from improper export of an Android component, enabling a local attack. Exploit appears publicly disclosed; vendor has not responded. Several sources co...

CVE-2025-10195 Seismic App com.seismic.doccenter AndroidManifest.xml improper export of android application components

A vulnerability has been found in Seismic App 2.4.2 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component com.seismic.doccenter. Such manipulation leads to improper export of android application components. An attack has to be approached locally. The exploit...

Linux Distros Unpatched Vulnerability : CVE-2016-3838

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Android 6.x before 2016-08-01 allows attackers to cause a denial of service loss of locked-screen 911 functionality via a crafted application that uses the...

Linux Distros Unpatched Vulnerability : CVE-2016-3915

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - camera/src/camerametadata.c in the Camera service in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before...

Linux Distros Unpatched Vulnerability : CVE-2015-3879

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Media Player Framework in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, aka internal bug 23223325. CVE-2015-3879 No...

PT-2025-37001

Name of the Vulnerable Software and Affected Versions: Seismic App version 2.4.2 Description: A vulnerability exists in Seismic App version 2.4.2 on Android due to improper export of android application components within the AndroidManifest.xml file of the com.seismic.doccenter component. This...

MasterLife Solutions Dietly App 安全漏洞

MasterLife Solutions Dietly App is a diet management application from MasterLife Solutions, Poland. A security vulnerability exists in MasterLife Solutions Dietly App version v1.25.0, which stems from hard-coded credentials and could lead to the disclosure of sensitive information...

Linux Distros Unpatched Vulnerability : CVE-2016-3765

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - decoder/impeg2dbitstream.c in mediaserver in Android 6.x before 2016-07-01 allows attackers to obtain sensitive information from process memory or cause a denia...

Linux Distros Unpatched Vulnerability : CVE-2016-2477

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm-video-v4l2/vidc/vdec/src/omxvdecmsm8974.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01...

Linux Distros Unpatched Vulnerability : CVE-2020-7018

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Elastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search interface. If a user is given the developer role, they will be able ...

Linux Distros Unpatched Vulnerability : CVE-2016-3932

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mediaserver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 29161895 and MediaTek internal...

Seismic App 安全漏洞

Seismic App is a mobile application for a sales empowerment platform from Seismic USA. A security vulnerability exists in Seismic App version 2.4.2, which stems from an improper export of the file AndroidManifest.xml component and could lead to a local attack...

Linux Distros Unpatched Vulnerability : CVE-2017-0410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a...

Linux Distros Unpatched Vulnerability : CVE-2016-3746

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free vulnerability in the mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x...

Linux Distros Unpatched Vulnerability : CVE-2016-2486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mp3dec/SoftMP3.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not...