CVE-2024-56948

The KuGou Music iOS application (version v20.0.0 ) is vulnerable to an issue that allows attackers to access sensitive user information by supplying a crafted link . This vulnerability is associated with CWE-601 (URL Redirection to Untrusted Site) and CWE-922 (Insecure Storage of Sensitive Inform...

CVE-2024-56960

An issue in Tianjin Xiaowu Information technology Co., Ltd BeiKe Holdings iOS 1.3.50 allows attackers to access sensitive user information via supplying a crafted link...

Apple iOS和iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 18.2 and iPadOS version 18.2, which originates from an application th...

CVE-2024-55573

An issue was discovered in Centreon centreon-web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x before 23.10.19, 23.04.x before 23.04.24. A user with high privileges is able to inject SQL into the form used to create virtual metrics...

CVE-2025-23218

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in the WeGIA application, specifically in the adicionarespecie.php endpoint. This vulnerability allows attackers to execute arbitrary SQL commands ...

CVE-2024-57924

creationtimestamp| type| source ---|---|--- 2025-01-19 12:16:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3sikuynr2s 2025-01-19 13:58:20+00:00| seen| https://t.me/cvedetector/15848 2025-12-03 14:14:49+00:00| seen|...

CVE-2024-54681 Ossur Mobile Logic Application Command Injection

Multiple bash files were present in the application's private directory. Bash files can be used on their own, by an attacker that has already full access to the mobile platform to compromise the translations for the application...

Ossur Mobile Logic Application 安全漏洞

Ossur Mobile Logic Application is an intelligent application for bionic prosthetics from Ossur. A security vulnerability exists in Ossur Mobile Logic Application versions prior to 1.5.5 that originates from exposing sensitive system information to unauthorized control...

CVE-2024-57757

JeeWMS before v2025.01.01 was discovered to contain a permission bypass in the component /interceptors/AuthInterceptor.cava...

CVE-2024-48893

An improper neutralization of input during web page generation vulnerability CWE-79 in FortiSOAR 7.3.0 through 7.3.3, 7.2.1 through 7.2.2 may allow an authenticated attacker to perform a stored cross site scripting XSS attack via the creation of malicious playbook...

CVE-2025-23032 Cross-Site Scripting (XSS) Stored endpoint 'adicionar_escala.php' parameter 'escala' in WeGIA

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the adicionarescala.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts int...

CVE-2024-53935

The com.callos14.callscreen.colorphone aka iCall OS17 - Color Phone Flash application through 4.3 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.callos14.callscreen.colorphone.DialerActivity component...

CVE-2024-53934

The Color Phone Call Screen Themes application (com.windymob.callscreen.ringtone.callcolor.colorphone) for Android, version 1.1.2 and earlier , contains a vulnerability that allows unauthorized phone calls. An attacker can trigger these calls without user interaction by sending a crafted intent t...

CVE-2024-1609

In OPPOStore iOS App, there's a possible escalation of privilege due to improper input validation...

Delta Electronics DRASimuCAD STP Resolution Type Obfuscation Code Execution Vulnerability

Delta Electronics DRASimuCAD is a robot simulation integration platform developed by Delta Electronics. A type confusion vulnerability exists in the parsing of the Delta Electronics DRASimuCAD STP file, which can be exploited by an attacker to submit a special file request and trick the user into...

CVE-2024-38819

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application...

Bun has an Application-level Prototype Pollution vulnerability in the runtime native API for Glo

Versions of the package bun before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects...

CVE-2024-12603

A logic vulnerability in the the mobile application com.transsion.applock can lead to bypassing the application password...

CVE-2024-28141

The web application is not protected against cross-site request forgery attacks. Therefore, an attacker can trick users into performing actions on the application when they visit an attacker-controlled website or click on a malicious link. E.g. an attacker can forge malicious links to reset the...

CVE-2024-28141 Cross-Site Request-Forgery

The web application is not protected against cross-site request forgery attacks. Therefore, an attacker can trick users into performing actions on the application when they visit an attacker-controlled website or click on a malicious link. E.g. an attacker can forge malicious links to reset the...