PT-2025-24356 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 5.0.3 Description: The issue allows a local attacker to cause apps to crash through type confusion. Recommendations: For versions prior to 5.0.3, update to a version that contains a fix for this issue. At the...

VulnCheck KEV: CVE-2024-46982

Next.js is a React framework for building full-stack web applications. By sending a crafted HTTP request, it is possible to poison the cache of a non-dynamic server-side rendered route in the pages router this does not affect the app router. When this crafted request is sent it could coerce...

PT-2025-24355 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 5.0.3 Description: The issue allows a local attacker to cause apps to crash through type confusion. Recommendations: For versions prior to 5.0.3, update to a version that contains a fix for this issue. At the...

CVE-2024-55585

In the moPS App through 1.8.618, all users can access administrative API endpoints without additional authentication, resulting in unrestricted read and write access, as demonstrated by /api/v1/users/resetpassword...

CVE-2025-5838

creationtimestamp| type| source ---|---|--- 2025-06-07 18:58:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqzzqq4ebh2r...

CVE-2024-55585

In the moPS App through 1.8.618, all users can access administrative API endpoints without additional authentication, resulting in unrestricted read and write access, as demonstrated by /api/v1/users/resetpassword...

moPS App 安全漏洞

The moPS App is a mobile app from moPS Inc. A security vulnerability exists in moPS App version 1.8.618 and prior versions, which stems from unauthenticated access to the management API endpoint and could lead to read/write privilege abuse...

CVE-2024-55585

In the moPS App through 1.8.618, all users can access administrative API endpoints without additional authentication, resulting in unrestricted read and write access, as demonstrated by /api/v1/users/resetpassword...

CVE-2024-55585

CVE-2024-55585 affects moPS App up to version 1.8.618. The vulnerability stems from insufficient access control on administrative API endpoints, allowing unauthenticated users to perform read and write actions (example: /api/v1/users/resetpassword). The CVSS shows high impact with confidentialiti...

CVE-2025-5785

creationtimestamp| type| source ---|---|--- 2025-06-06 18:52:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqxiyiv2ar2u...

CVE-2025-49440

creationtimestamp| type| source ---|---|--- 2025-06-06 15:25:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqx5g2hfh22p...

CVE-2025-49443

creationtimestamp| type| source ---|---|--- 2025-06-06 14:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqx3hxsiyc2o...

Malicious code in tcp-app-activation-react (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8b8acee879d06b50ea282023a2896ab53ab591f61f99513e23bc3a582e3bc1d Any computer that has this package installed or running should be considered...

MAL-2025-4767 Malicious code in tcp-app-activation-react (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8b8acee879d06b50ea282023a2896ab53ab591f61f99513e23bc3a582e3bc1d Any computer that has this package installed or running should be considered...

CVE-2025-5192

creationtimestamp| type| source ---|---|--- 2025-06-06 11:07:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqwoyytbet2p...

Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates

Summary IBM App Connect Enterprise Certified Container ACEcc is built on the Red Hat Universal Base Images. ACEcc operator versions 12.0.12 LTS and 12.12.0 contain fixes to the listed CVEs found in the base images. This bulletin provides patch information to address the reported vulnerabilities...

Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to denial of service [CVE-2024-45338]

Summary IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to denial of service. This bulletin provides patch information to address the reported vulnerability. CVE-2024-45338 Vulnerability Details CVEID:CVE-2024-45338 DESCRIPTION: An attacker can craft an...

CVE-2024-46941

creationtimestamp| type| source ---|---|--- 2025-06-06 04:51:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvzy77nut2m...

CVE-2025-5715

A vulnerability was found in Signal App 7.41.4 on Android. It has been declared as problematic. This vulnerability affects unknown code of the component Biometric Authentication Handler. The manipulation leads to missing critical step in authentication. It is possible to launch the attack on the...

CVE-2025-5715

A vulnerability was found in Signal App 7.41.4 on Android. It has been declared as problematic. This vulnerability affects unknown code of the component Biometric Authentication Handler. The manipulation leads to missing critical step in authentication. It is possible to launch the attack on the...