7020 matches found
MAL-2025-276 Malicious code in calypso-apps-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f0031b185706e20041563f879032469eba6e8220fe4d6fe93acc11cee6235c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in 3cx-call-control-apps (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca09aeb5dd1513eb46048a6987f18b72f8c9f52ba8340cefc8521c2138be8503 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-148 Malicious code in 3cx-call-control-apps (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca09aeb5dd1513eb46048a6987f18b72f8c9f52ba8340cefc8521c2138be8503 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-0578
A vulnerability was found in Facile Sistemas Cloud Apps up to 20250107. It has been classified as problematic. Affected is an unknown function of the file /account/forgotpassword of the component Password Reset Handler. The manipulation of the argument reterros leads to cross site scripting. It i...
CVE-2025-0578 Facile Sistemas Cloud Apps Password Reset forgotpassword cross site scripting
A vulnerability was found in Facile Sistemas Cloud Apps up to 20250107. It has been classified as problematic. Affected is an unknown function of the file /account/forgotpassword of the component Password Reset Handler. The manipulation of the argument reterros leads to cross site scripting. It i...
CVE-2025-0578 Facile Sistemas Cloud Apps Password Reset forgotpassword cross site scripting
A vulnerability was found in Facile Sistemas Cloud Apps up to 20250107. It has been classified as problematic. Affected is an unknown function of the file /account/forgotpassword of the component Password Reset Handler. The manipulation of the argument reterros leads to cross site scripting. It i...
CVE-2025-0578
CVE-2025-0578 affects Facile Sistemas Cloud Apps (up to 20250107), specifically the Password Reset Handler’s /account/forgotpassword function. The issue is a cross-site scripting vulnerability caused by manipulating the reterros parameter, allowing remote exploitation. Public exploits have been d...
Facile Sistemas Cloud Apps 代码注入漏洞
Facile Sistemas Cloud Apps is an application from Facile Sistemas. A code injection vulnerability exists in Facile Sistemas Cloud Apps 20250107 and earlier versions, which stems from the parameter retros in the file /account/forgotpassword can lead to cross-site scripting...
Software Bill of Materials (SBOM) for your Spin Apps
Learn how to generate, scan, and distribute Software Bill of Materials SBOM for Spin applications using trivy and oras...
CVE-2025-0476
Mattermost Mobile Apps versions =2.22.0 fail to properly handle specially crafted attachment names, which allows an attacker to crash the mobile app for any user who opened a channel containing the specially crafted attachment...
Mattermost Mobile Apps 安全漏洞
Mattermost Mobile Apps is a messaging mobile application from Mattermost USA. A security vulnerability exists in Mattermost Mobile Apps version 2.22.0 that stems from an inability to properly handle posts with attachments, allowing an attacker to cause a mobile device to crash by creating such a...
CVE-2025-0476 Mobile crash via file with specially crafted filename
Mattermost Mobile Apps versions =2.22.0 fail to properly handle specially crafted attachment names, which allows an attacker to crash the mobile app for any user who opened a channel containing the specially crafted attachment...
CVE-2025-0476
Mattermost Mobile Apps (versions <= 2.22.0) are vulnerable due to improper handling of specially crafted attachment names, which can crash the mobile app for any user who opens a channel containing such an attachment. The issue is a denial-of-service-like crash rather than data disclosure. Aff...
CVE-2025-0476 Mobile crash via file with specially crafted filename
Mattermost Mobile Apps versions =2.22.0 fail to properly handle specially crafted attachment names, which allows an attacker to crash the mobile app for any user who opened a channel containing the specially crafted attachment...
CVE-2025-0476 Mobile crash via file with specially crafted filename
Mattermost Mobile Apps versions =2.22.0 fail to properly handle specially crafted attachment names, which allows an attacker to crash the mobile app for any user who opened a channel containing the specially crafted attachment...
CVE-2025-21083
Mattermost Mobile Apps versions =2.22.0 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post...
CVE-2025-20036
Mattermost Mobile Apps versions =2.22.0 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post...
CVE-2025-21083 Insufficient Input Validation on Post Props
Mattermost Mobile Apps versions =2.22.0 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post...
CVE-2025-21083 Insufficient Input Validation on Post Props
Mattermost Mobile Apps versions =2.22.0 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post...