7779 matches found
Malicious code in com.digmap.voicerecog (npm)
The package com.digmap.voicerecog was found to contain malicious code...
MAL-2025-17318 Malicious code in com.digmap.voicerecog (npm)
The package com.digmap.voicerecog was found to contain malicious code...
MAL-2025-17327 Malicious code in com.microsoft.azure.spatial-anchors-sdk.windows (npm)
The package com.microsoft.azure.spatial-anchors-sdk.windows was found to contain malicious code...
CVE-2025-8745
CVE-2025-8745 affects Weee RICEPO App 6.17.77 on Android, specifically the com.ricepo.app component. The vulnerability arises from improper export of AndroidManifest.xml handling, enabling a local-attack impact (confidentiality impacted). Exploitation details are publicly disclosed; vendor was co...
CVE-2025-55014
The YouDao plugin for StarDict, as used in stardict 3.0.7+git20220909+dfsg-6 in Debian trixie and elsewhere, sends an X11 selection to the dict.youdao.com and dict.cn servers via cleartext HTTP...
UBUNTU-CVE-2025-55014
The YouDao plugin for StarDict, as used in stardict 3.0.7+git20220909+dfsg-6 in Debian trixie and elsewhere, sends an X11 selection to the dict.youdao.com and dict.cn servers via cleartext HTTP...
Caixin News App 安全漏洞
Caixin News App is a news app application from China Caixin Caixin News. A security vulnerability exists in Caixin News App version 8.0.1, which originates from an improper export of Android application components due to misuse of the file AndroidManifest.xml in the component com.caixin.news...
TVB Big Big Shop App 安全漏洞
TVB Big Big Shop App is a mobile shopping application of Television Broadcasts TVB Corporation of Hong Kong, China. A security vulnerability exists in TVB Big Big Shop App version 2.9.0, which originates from an improper export of Android application components due to misuse of the file...
CVE-2025-7865
A vulnerability was found in thinkgem JeeSite up to 5.12.0. It has been declared as problematic. This vulnerability affects the function xssFilter of the file src/main/java/com/jeesite/common/codec/EncodeUtils.java of the component XSS Filter. The manipulation of the argument text leads to cross...
MAL-2025-5905 Malicious code in crypto-com-developer-platform-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3ba03d0d0285dec410f541b8e7fb12a809792658d08b88105efe3ecf507350b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-34090
Rejected reason: Neither filed by Chrome nor a valid security vulnerability...
CVE-2025-34090
The CVE-2025-34090 entries reveal a local security bypass in Google Chrome related to the AppBound cookie encryption mechanism. Root cause: insufficient validation of COM server paths during inter-process communication allows a low-privilege attacker to hijack the COM CLSID registration used by C...
PT-2025-27671 · Google · Google Chrome
Name of the Vulnerable Software and Affected Versions: Google Chrome affected versions not specified Description: A security bypass issue exists in the AppBound cookie encryption mechanism of Google Chrome due to insufficient validation of COM server paths during inter-process communication. This...
Exploit for Command Injection in Google Android
unisoc-su A method for CVE-2025-31710https://nvd.nist.gov/v...
CVE-2025-27811
A local privilege escalation in the razerelevationservice.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service...
CVE-2025-27811
A local privilege escalation in the razerelevationservice.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service...
CVE-2025-27811
A local privilege escalation in the razerelevationservice.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service...
PT-2025-23806 · Razer · Razer Synapse
Name of the Vulnerable Software and Affected Versions: Razer Synapse versions 4 through 4.0.86.2502180127 Description: A local privilege escalation issue in the razer elevation service.exe allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service...