8410 matches found
Malicious code in tapioca-frontend-apps (npm)
The package tapioca-frontend-apps was found to contain malicious code...
MAL-2025-17121 Malicious code in click-apps-library (npm)
The package click-apps-library was found to contain malicious code...
MAL-2025-7835 Malicious code in @epc-apps/api-version-test (npm)
The package @epc-apps/api-version-test was found to contain malicious code...
MAL-2025-34552 Malicious code in tapioca-frontend-apps (npm)
The package tapioca-frontend-apps was found to contain malicious code...
MAL-2025-14738 Malicious code in apps-script-oauth2 (npm)
The package apps-script-oauth2 was found to contain malicious code...
CVE-2025-50861
The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps. This poses a risk of unintended access to application internals and can cause denial of service or logic abuse...
PT-2025-33139 · Ctrlx Os · Ctrlx Os
Name of the Vulnerable Software and Affected Versions: ctrlX OS affected versions not specified Description: A vulnerability exists in the Task API endpoint of the ctrlX OS setup mechanism. This allows a remote, unauthenticated attacker to access and extract internal application data, including...
Microsoft Office Memory Use After Free Code Execution
The vulnerability of Microsoft Office packages, 365 Apps for Enterprise, and Excel relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Office Buffer Overflow
The vulnerability of Microsoft Office packages, 365 Apps for Enterprise, and Excel is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Office Code Execution
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the improper conversion of numerical types. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Office Memory Use After Free Code Execution
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
New trends in phishing and scams: how AI and social media are changing the game
Introduction Phishing and scams are dynamic types of online fraud that primarily target individuals, with cybercriminals constantly adapting their tactics to deceive people. Scammers invent new methods and improve old ones, adjusting them to fit current news, trends, and major world events:...
CVE-2025-49457
Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...
CVE-2025-50155 Windows Push Notifications Apps Elevation of Privilege Vulnerability
...
CVE-2025-53726 Windows Push Notifications Apps Elevation of Privilege Vulnerability
...
CVE-2025-53724 Windows Push Notifications Apps Elevation of Privilege Vulnerability
...
CVE-2025-53724 Windows Push Notifications Apps Elevation of Privilege Vulnerability
...
CVE-2024-41984
A vulnerability has been identified in SmartClient modules Opcenter QL Home SC All versions = V13.2 = V13.2 = V13.2 V2506. The affected application improperly handles error while accessing an inaccessible resource leading to exposing the system applications...
CVE-2024-41984
A vulnerability has been identified in SmartClient modules Opcenter QL Home SC All versions = V13.2 = V13.2 = V13.2 V2506. The affected application improperly handles error while accessing an inaccessible resource leading to exposing the system applications...
CVE-2025-30027
An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a...