CVE-2025-30516 Unauthorized Notification Exposure in Mobile App Under Specific Conditions

Mattermost Mobile Apps versions =2.25.0 fail to terminate sessions during logout under certain conditions e.g. poor connectivity, allowing unauthorized users on shared devices to access sensitive notification content via continued mobile notifications...

CVE-2025-30516

Summary of vulnerability (CVE-2025-30516) : Mattermost Mobile Apps versions ≤ 2.25.0 fail to terminate sessions upon logout under certain conditions (e.g., poor connectivity). This can allow unauthorized users on shared devices to access sensitive notification content via continued notifications....

PT-2025-16220

Name of the Vulnerable Software and Affected Versions: Mattermost Mobile Apps versions =2.25.0 Description: The issue arises when Mattermost Mobile Apps fail to terminate sessions during logout under certain conditions, such as poor connectivity, allowing unauthorized users on shared devices to...

Mattermost Mobile Apps 安全漏洞

Mattermost Mobile Apps is a messaging mobile application from Mattermost USA. Mattermost Mobile Apps suffers from an information disclosure vulnerability that stems from a failure to properly terminate a session when logging out, which can be exploited by an attacker to disclose sensitive...

Citrix Virtual Apps and Desktops - Unable to launch APP-V application from the VDA

When user tries to launch published app-v application there is an error displayed: The application failed to launch. This may be due to a network failure...

SpyNote, BadBazaar, MOONSHINE Malware Target Android and iOS Users via Fake Apps

Cybersecurity researchers have found that threat actors are setting up deceptive websites hosted on newly registered domains to deliver a known Android malware called SpyNote. These bogus websites masquerade as Google Play Store install pages for apps like the Chrome web browser, indicating an...

CVE-2025-27443

Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a loss of integrity via local access...

The vulnerability of Microsoft 365 Apps for Enterprise and Office, related to the use of memory after it is freed, allows attackers to increase their privileges.

The vulnerability of Microsoft 365 Apps for Enterprise and Office relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of Microsoft 365 Apps for Enterprise and Office, related to the use of memory after it is freed, allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft 365 Apps for Enterprise and Office relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of Microsoft 365 Apps for Enterprise and Office, related to the swapping of an unreliable pointer, allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft 365 Apps for Enterprise and Office relates to the use of an untrusted pointer. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

Citrix Virtual Apps and Desktops 2407 : Sophos Endpoint Agent gets loaded into ICA user session

Published app sessions are getting loaded with Sophos Endpoint Agent. This is seen under Workspace app Connection Center. Sophos Endpoint agent is getting loaded into all the Citrix ICA sessions. Citrix Workspace app Connection Center shows the "Sophos Endpoint Agent - Notification Icon". Sophos...

Zoom Client for Meetings < 6.3.10 Vulnerability (ZSB-25015)

The version of Zoom Client for Meetings installed on the remote host is prior to 6.3.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25015 advisory. - Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of...

Microsoft Security Update Validation Report April 2025

Microsoft’s April 2025 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...

The vulnerability of Microsoft 365 Apps for Enterprise and Office, related to the use of memory after it is freed, allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft 365 Apps for Enterprise and Office relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2025-30670

Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-30671

Null pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-27441

Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access...

CVE-2025-27442

Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access...

Child predators are lurking on dating apps, warns report

Using a dating app? Beware of your potential partner's motives. A report from Edinburgh University warns that child abusers are using these apps to find single parents with vulnerable children. The Searchlight 2025 report, from the University's Childlight Global Child Safety Institute, analyses t...

The vulnerability of Microsoft Office packages, Excel, and 365 Apps for Enterprise, as well as Microsoft Access, relates to a full-integer overflow issue, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise, as well as Microsoft Access, is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created file...