31770 matches found
CVE-2025-50862
The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This presents a risk of user data exposure...
PT-2025-33409 · Lotus Cars · Lotus Cars Android App
Name of the Vulnerable Software and Affected Versions: Lotus Cars Android App version 1.2.8 Description: The Lotus Cars Android app com.lotus.carsdomestic.intl version 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps...
CVE-2025-50862
The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This presents a risk of user data exposure...
PT-2025-33138 · Ctrlx Os · Ctrlx Os
Name of the Vulnerable Software and Affected Versions: ctrlX OS affected versions not specified Description: A vulnerability in the web application of the ctrlX OS setup mechanism allowed an authenticated attacker with low privileges to gain remote access to backup archives created by a user with...
Altus Cars Lotus Cars Android app 安全漏洞
Altus Cars Lotus Cars Android app is a mobile app from UK-based Altus Cars that provides vehicle remote control and connectivity services. A security vulnerability exists in Altus Cars Lotus Cars Android app version 1.2.8, which stems from allowBackup set to true, which could lead to user data...
Malicious code in web-tv-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a5014feae2671e422a28a92b6bd6f8a040a605699f1ebea3e44fb3f910e9e893 The OpenSSF Package Analysis project identified 'web-tv-app' @ 10.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2025-6868 Malicious code in web-tv-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a5014feae2671e422a28a92b6bd6f8a040a605699f1ebea3e44fb3f910e9e893 The OpenSSF Package Analysis project identified 'web-tv-app' @ 10.0.0 npm as malicious. It is considered malicious because: - The package...
CVE-2025-45314
creationtimestamp| type| source ---|---|--- 2025-08-13 19:26:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwcklb2lvp2p...
CVE-2025-2183
An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect™ app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root...
CVE-2025-2183 GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation
An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect™ app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root...
CVE-2025-6715
creationtimestamp| type| source ---|---|--- 2025-08-13 09:01:25+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwbhnewh6s2b 2025-08-29 21:02:30+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lxkxfahep42p...
MAL-2025-6912 Malicious code in android-app-promotion (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in android-app-promotion (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
CVE-2025-54229
creationtimestamp| type| source ---|---|--- 2025-08-13 02:14:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwaquy34p42k...
Liferay Portal 7.4.x < 7.4.3.132 Cross-Site Scripting
Liferay Portal versions 7.4.x prior to 7.4.3.132 and DXP versions prior to 2024.Q1.13 or 2024.Q2 prior to 2024.Q4.6 are affected by a Cross-Site Scripting allowing an remote non-authenticated attacker to inject JavaScript into the modules/apps/marketplace/marketplace-app-manager-web. No source da...
ALSA-2025:13780 Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: angle: insufficient input validation can cause undefined behavior CVE-2025-6558 webkitgtk: A download?s origin may be incorrectly associated CVE-2025-43240 webkitgtk: Processing maliciously...
PT-2025-33023 · Palo Alto Networks · Globalprotect
Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect app affected versions not specified Description: An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect app allows attackers to connect the app to arbitrary servers. This can enab...
CVE-2025-49456
Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access...