CVE-2025-9672 Rejseplanen App de.hafas.android.rejseplanen AndroidManifest.xml improper export of android application components

A security vulnerability has been detected in Rejseplanen App up to 8.2.2. Affected is an unknown function of the file AndroidManifest.xml of the component de.hafas.android.rejseplanen. The manipulation leads to improper export of android application components. The attack needs to be performed...

CVE-2025-9672

The CVE-2025-9672 entry affects Rejseplanen App (package de.hafas.android.rejseplanen) up to version 8.2.2. The vulnerability arises from an improper export of AndroidManifest.xml components in the app, enabling a local attack. Public exploit details exist, and there was no response from the vend...

CVE-2025-9671 UAB Paytend App com.passport.cash AndroidManifest.xml improper export of android application components

A weakness has been identified in UAB Paytend App up to 2.1.9 on Android. This impacts an unknown function of the file AndroidManifest.xml of the component com.passport.cash. Executing manipulation can lead to improper export of android application components. The attack needs to be launched...

MAL-2025-41957 Malicious code in contentful-app-entry-localization-matrix (npm)

The package contentful-app-entry-localization-matrix was found to contain malicious code...

Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality [CVE-2025-22871]

Summary Golang package net/http is used by IBM App Connect Enterprise Certified Container operator and operands for http communication. IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality. This bulletin provides patch information to addre...

CVE-2025-40709

creationtimestamp| type| source ---|---|--- 2025-08-29 17:44:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxkmea22iw27...

CVE-2025-9650 yeqifu carRental AppFileUtils.java removeFileByPath path traversal

A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. This affects the function removeFileByPath of the file src/main/java/com/yeqifu/sys/utils/AppFileUtils.java. The manipulation of the argument carimg leads to path traversal. The attack is possible t...

CVE-2025-9650 yeqifu carRental AppFileUtils.java removeFileByPath path traversal

A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. This affects the function removeFileByPath of the file src/main/java/com/yeqifu/sys/utils/AppFileUtils.java. The manipulation of the argument carimg leads to path traversal. The attack is possible t...

CVE-2025-43268

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A malicious app may be able to gain root privileges...

CVE-2025-43284

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.7.7, macOS Ventura 13.7.7, macOS Sequoia 15.6. An app may be able to cause unexpected system termination...

CVE-2025-43268

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A malicious app may be able to gain root privileges...

CVE-2024-54568

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2. Parsing a maliciously crafted file may lead to an unexpected app termination...

CVE-2024-54568

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2. Parsing a maliciously crafted file may lead to an unexpected app termination...

CVE-2024-54568

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2. Parsing a maliciously crafted file may lead to an unexpected app termination...

CVE-2025-43268

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A malicious app may be able to gain root privileges...

CVE-2025-43268

The CVE-2025-43268 entry concerns macOS Sequoia. A permissions issue could allow a malicious app to gain root privileges. Apple fixed this in macOS Sequoia 15.6. The CVE is listed under the Kernel component (and related Apple security content). Mitigation is to update to Sequoia 15.6 or later as ...

PT-2025-35311

Name of the Vulnerable Software and Affected Versions: Transbyte Scooper News App versions up to 1.2 Description: A flaw exists in Transbyte Scooper News App up to version 1.2 on Android, related to improper export of android application components due to manipulation of the AndroidManifest.xml...

UAB Paytend App 安全漏洞

UAB Paytend App is a banking mobile application from UAB Paytend. A security vulnerability exists in UAB Paytend App version 2.1.9 and earlier, which stems from improper component export in the file AndroidManifest.xml and could lead to a local attack...

NCSOFT Universe App 安全漏洞

NCSOFT Universe App is a mobile game by South Korean company NCSOFT. A security vulnerability exists in NCSOFT Universe App version 1.3.0 and earlier, which stems from improper component export in the file AndroidManifest.xml and could lead to a local attack...

PT-2025-35309

Name of the Vulnerable Software and Affected Versions: Rejseplanen App versions up to 8.2.2 Description: A security issue has been identified in the Rejseplanen App related to improper export of android application components due to manipulation of an unknown function within the AndroidManifest.x...