7001 matches found
CVE-2025-27132
in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios...
CVE-2025-27132
in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios...
OpenHarmony 缓冲区错误漏洞
OpenHarmony is an open source project of the OpenAtom China Foundation for a kind of Hongmeng operating system. A buffer error vulnerability exists in OpenHarmony 5.0.3 and earlier versions, which stems from an out-of-bounds write and could lead to the execution of arbitrary code in pre-installed...
HCL Domino Leap 安全漏洞
HCL Domino Leap is a cloud-based collaboration platform from HCL India that modernizes traditional Domino applications. HCL Domino Leap suffers from a security vulnerability that stems from improper endpoint access control, which could result in certain administrator users importing applications...
Unlocking User-Oriented Pages: Intention-Driven Black-Box Scanner for Real-World Web Applications
Black-box scanners have played a significant role in detecting vulnerabilities for web applications. A key focus in current black-box scanning is increasing test coverage i.e., accessing more web pages. However, since many web applications are user-oriented, some deep pages can only be accessed...
SUSE CVE-2017-11354
Fiyo CMS v2.0.7 has an SQL injection vulnerability in dapur/apps/apparticle/sysarticle.php via the name parameter in editing or adding a tag name...
The vulnerability of Microsoft Office, Word, and 365 Apps for Enterprise packages lies in the fact that they allow the loading of unreliable external data alongside reliable data. This allows attackers to circumvent existing security restrictions.
The vulnerability of Microsoft Office, Word, and 365 Apps for Enterprise packages lies in the loading of unreliable external data alongside reliable data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
CVE-2025-46461
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Relentless Apps RRSSB rrssb allows DOM-Based XSS.This issue affects RRSSB: from n/a through = 1.0.1...
Exploit for Deserialization of Untrusted Data in Google Android
Exploration of CVE-2024-31317 CVE-2024-31317 provides unprivi...
The dangers of web based messaging apps
TL;DR Anyone with a web browser and access to your phone in an unlocked state could potentially set up persistent access to your secure messaging platforms without needing to know your credentials!. Whilst this clearly requires unfettered access to your phone, scenarios such as screen replacement...
Mattermost Mobile Apps Information Disclosure Vulnerability
Mattermost Mobile Apps is a messaging mobile application from Mattermost USA. Mattermost Mobile Apps suffers from an information disclosure vulnerability that stems from a failure to properly terminate a session when logging out, which can be exploited by an attacker to disclose sensitive...
CVE-2025-46461
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Relentless Apps RRSSB rrssb allows DOM-Based XSS.This issue affects RRSSB: from n/a through = 1.0.1...
CVE-2025-46461 WordPress RRSSB plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Relentless Apps RRSSB rrssb allows DOM-Based XSS.This issue affects RRSSB: from n/a through = 1.0.1...
CVE-2025-46461
CVE-2025-46461 affects Relentless Apps RRSSB WordPress plugin (
PT-2025-17779 · Relentless Apps · Rrssb
Name of the Vulnerable Software and Affected Versions: Relentless Apps RRSSB versions 1.0.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an attacker can...
How to Clear iPhone Storage
Free up space on your iPhone fast. Learn 5 proven ways to clear storage, remove clutter, and manage photos, apps, and files with no gimmicks, just results...
Russian Hackers Exploit Microsoft OAuth to Target Ukraine Allies via Signal and WhatsApp
Multiple suspected Russia-linked threat actors are "aggressively" targeting individuals and organizations with ties to Ukraine and human rights with an aim to gain unauthorized access to Microsoft 365 accounts since early March 2025. The highly targeted social engineering operations, per Volexity...
Command-line upgrade to CVAD 2203+ fails if Delivery Controller can't connect to the license server
Command-line upgrades to CVAD version 2203 or later will fail if the Delivery Controller cannot connect to the license server. Following error is seen in the installation failure log. The product version you are upgrading to requires an upgraded version of the Citrix License Server.parsing:...
The vulnerability of Zoom Apps software products, related to the use of memory after it is freed, allows a hacker to trigger a service failure.
The vulnerability of Zoom Apps software products is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
