31759 matches found
CVE-2025-48861
A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract internal application data, including potential debug logs and the version of installed apps...
CVE-2025-8898
creationtimestamp| type| source ---|---|--- 2025-08-16 07:31:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwitzpx5m42g 2026-04-08 23:31:21+00:00| seen| Telegram/uDb8p1iskXO6Pq5CJ62NBhUvl5M2Dmbo-CUN4HEs8fpntc...
CVE-2025-8882
creationtimestamp| type| source ---|---|--- 2025-08-16 02:38:04+00:00| seen| https://bsky.app/profile/secqube.com/post/3lwidmomzge2f...
CVE-2025-44201
creationtimestamp| type| source ---|---|--- 2025-08-16 00:32:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwi4lx4yml2t...
CVE-2025-50862
The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This presents a risk of user data exposure...
CVE-2025-2183
An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect™ app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root...
CVE-2025-02383
creationtimestamp| type| source ---|---|--- 2025-08-15 12:44:38+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lwgv2dd7nk2q...
Apple Music Classical for Android 安全漏洞
Apple Music Classical for Android is a standalone app for classical music lovers from Apple USA. A security vulnerability exists in Apple Music Classical for Android, which stems from the possibility that the app could accidentally disclose user credentials...
CVE-2025-50861
creationtimestamp| type| source ---|---|--- 2025-08-14 23:27:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwfiieynbn2g 2026-07-06 06:49:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxirff4di2y...
CVE-2025-50861
The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps. This poses a risk of unintended access to application internals and can cause denial of service or logic abuse...
CVE-2025-53249
Cross-Site Request Forgery CSRF vulnerability in hakeemnala Build App Online build-app-online allows Cross Site Request Forgery.This issue affects Build App Online: from n/a through = 1.0.23...
Malicious code in my-treats-app (npm)
The package my-treats-app was found to contain malicious code...
Malicious code in cashfree-pg-koa-app (npm)
The package cashfree-pg-koa-app was found to contain malicious code...
Malicious code in @avocado-team/app-center-app-widget (npm)
The package @avocado-team/app-center-app-widget was found to contain malicious code...
Malicious code in cash-app-money-generator-new-updated-2023-nhfy702r-fft (npm)
The package cash-app-money-generator-new-updated-2023-nhfy702r-fft was found to contain malicious code...
Malicious code in lerna-test-app2 (npm)
The package lerna-test-app2 was found to contain malicious code...
Malicious code in work-cpu-app (npm)
The package work-cpu-app was found to contain malicious code...
Malicious code in shopify_flow_app (npm)
The package shopifyflowapp was found to contain malicious code...