CVE-2025-43184

CVE-2025-43184 affects macOS Shortcuts settings handling. The issue involves bypassing sensitive Shortcuts app settings, which was addressed by adding an additional user-consent prompt. Apple patches are available in macOS Sonoma 14.7.7, macOS Ventura 13.7.7, and macOS Sequoia 15.4. The underlyin...

CVE-2025-43184

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14.7.7, macOS Ventura 13.7.7, macOS Sequoia 15.4. A shortcut may be able to bypass sensitive Shortcuts app settings...

CVE-2025-53541

creationtimestamp| type| source ---|---|--- 2025-07-29 21:36:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv52udehzz2e...

CVE-2025-24119

creationtimestamp| type| source ---|---|--- 2025-07-29 21:33:07+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lv52npb5jc2n 2026-04-02 22:17:44+00:00| seen| Telegram/KPFmBxULTPwA3hDhoR9h9PMgAu8sVTpVxH6h4m-4yWjc...

CVE-2025-53902

creationtimestamp| type| source ---|---|--- 2025-07-29 21:31:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv52leq5ch2k...

CVE-2025-31965

creationtimestamp| type| source ---|---|--- 2025-07-29 20:46:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv4y2u7ht52a...

CVE-2016-9840

creationtimestamp| type| source ---|---|--- 2025-07-29 19:15:16+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lv4sx6c6ps2u...

CVE-2025-2179

CVE-2025-2179 affects Palo Alto Networks GlobalProtect App on Linux. A privilege-assignment flaw allows a locally authenticated, non-administrative user to disable the GlobalProtect app, even when configuration would normally prevent it. Other platforms (Windows, macOS, iOS, Android, Chrome OS, G...

CVE-2025-2179 GlobalProtect App: Non Admin User Can Disable the GlobalProtect App

An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on Linux devices enables a locally authenticated non administrative user to disable the app even if the GlobalProtect app configuration would not normally permit them to do so. The GlobalProtect app on...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affects App Connect Professional

Summary There are multiple vulnerabilities in the IBM SDK Java Technology used by App Connect Professional. These issue were disclosed as part of the IBM Java SDK updates in Apr 2025, App Connect Professional has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTIO...

CVE-2025-5587

creationtimestamp| type| source ---|---|--- 2025-07-29 13:29:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv47nl3blu2w...

CVE-2025-54661

creationtimestamp| type| source ---|---|--- 2025-07-29 06:50:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv3je4etqv2j...

CVE-2025-53649

"SwitchBot" App for iOS/Android contains an insertion of sensitive information into log file vulnerability in versions V6.24 through V9.12. If this vulnerability is exploited, sensitive user information may be exposed to an attacker who has access to the application logs...

"SwitchBot" App vulnerable to insertion of sensitive information into log file

Overview "SwitchBot" App provided by SwitchBot contains the following vulnerability. Insertion of sensitive information into log file CWE-532 - CVE-2025-53649 Soh Satoh reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnershi...

CVE-2025-53649

"SwitchBot" App for iOS/Android contains an insertion of sensitive information into log file vulnerability in versions V6.24 through V9.12. If this vulnerability is exploited, sensitive user information may be exposed to an attacker who has access to the application logs...

CVE-2025-53649

"SwitchBot" App for iOS/Android contains an insertion of sensitive information into log file vulnerability in versions V6.24 through V9.12. If this vulnerability is exploited, sensitive user information may be exposed to an attacker who has access to the application logs...

CVE-2025-53649

CVE-2025-53649 – SwitchBot App (Android/iOS) involves an insecure logging flaw where sensitive user information can be written to log files. Affected versions are SwitchBot App V6.24 through V9.12. The root cause is insertion of sensitive information into log files, enabling exposure to anyone wi...

CVE-2025-8321

creationtimestamp| type| source ---|---|--- 2025-07-29 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-712/ 2025-07-30 03:37:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv5oypy4xl2q...

CVE-2025-54766

creationtimestamp| type| source ---|---|--- 2025-07-29 01:10:33+00:00| seen| https://bsky.app/profile/jimbecher.bsky.social/post/3lv2wdmsm4s2k...

Malicious code in fast-todo-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e463847c2b9e6ff287b0862f66d4845c4452d8f4508ee7a298c99fccec9ca00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...