31775 matches found
CVE-2025-45512
creationtimestamp| type| source ---|---|--- 2025-08-07 21:02:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lvtn53bsf425...
CVE-2023-41530
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the appcontact parameter in appsearch.php...
Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Node.js (CVE-2025-23165 & CVE-2025-23166) )
Summary IBM App Connect Enterprise is vulnerable to Missing Release of Memory after Effective Lifetime and Uncaught Exception due to Node.js. Vulnerability Details CVEID:CVE-2025-23165 DESCRIPTION: In Node.js, the ReadFileUtf8 internal binding leaks memory due to a corrupted pointer in uvfss.file...
TeaOnHer, the male version of Tea, is leaking personal information on its users too
Last week we reported about some serious leaks in Tea Dating Advice, an app that provides a space for women to exchange information about men they know, have met, or have dated in the past. The app aims to provide a platform where people can share relevant information about, say, potentially...
Meta accessed women’s health data from Flo app without consent, says court
A jury has ruled that Meta accessed sensitive information from a woman's reproductive health tracking app without consent. The app in question is called Flo Health. Developed in 2015 in Belarus to track menstrual cycles, it has evolved over the years as a tracking app for highly detailed, intimat...
CVE-2025-53520
creationtimestamp| type| source ---|---|--- 2025-08-07 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-219-07 2025-08-07 16:02:20+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lvt4ekj5qa2q 2025-08-08 20:28:17+00:00| seen|...
CVE-2025-3770
creationtimestamp| type| source ---|---|--- 2025-08-07 06:04:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvs2x7d36e2e...
[SECURITY] Fedora 42 Update: perl-PAR-Packer-1.064-2.fc42
This module implements the App::Packer::Backend interface, for generating stand-alone executables, perl scripts and PAR files...
VulnCheck KEV: CVE-2025-34300
A template injection vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14 via the ciwweb.pl http://ciwweb.pl/ Perl web application. Exploitation allows an unauthenticated attacker can execute arbitrary commands...
IBM App Connect Enterprise (ACE) Path Traversal (7182418)
IBM App Connect enterprise 12.0.1.0 through 12.0.12.10 and 13.0.1.0 through 13.0.2.1 could allow an authenticated user to write to an arbitrary file on the system during bar configuration deployment due to improper pathname limitations on restricted directories. Note that Nessus has not tested fo...
Hospital Management System 安全漏洞
Hospital Management System is a hospital management system by Kishan Lal, an individual developer. A security vulnerability exists in Hospital Management System version v4, which originates from a SQL injection due to incorrect manipulation of the parameter appcontact in the file appsearch.php...
CVE-2025-6633
creationtimestamp| type| source ---|---|--- 2025-08-06 23:20:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvref77h7r2a...
CVE-2025-8523
A vulnerability has been found in RiderLike Fruit Crush-Brain App 1.0 on Android and classified as problematic. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.fruitcrush.fun. The manipulation leads to improper export of android...
CVE-2025-51308
creationtimestamp| type| source ---|---|--- 2025-08-06 18:11:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvqt42nspt2s...
MAL-2025-6855 Malicious code in simple-web-app-package (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3c77bf97c7fa506294389252c6bdf8c7918abe5aa4b0cb2956217963d11e33a6 The OpenSSF Package Analysis project identified...
Malicious code in simple-web-app-package (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3c77bf97c7fa506294389252c6bdf8c7918abe5aa4b0cb2956217963d11e33a6 The OpenSSF Package Analysis project identified...
Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates
Summary IBM App Connect Enterprise Certified Container ACEcc is built on the Red Hat Universal Base Images. ACEcc operator versions 12.0.14 LTS and 12.14.0 addresses the listed CVEs found in the base images. This bulletin provides patch information to address the reported vulnerabilities...
CVE-2025-46390
creationtimestamp| type| source ---|---|--- 2025-08-06 13:49:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvqeijxd2m2p...