8744 matches found
CVE-2025-9675
A vulnerability was determined in Voice Changer App up to 1.1.0. This issue affects some unknown processing of the file AndroidManifest.xml of the component com.tuyangkeji.changevoice. Executing manipulation can lead to improper export of android application components. It is possible to launch t...
CVE-2025-9676
CVE-2025-9676 affects NCSOFT Universe App (versions up to 1.3.0) due to improper export of AndroidManifest.xml in the com.ncsoft.universeapp component. Root cause: exported Android components not restricted, enabling local attack. Exploit is publicly available; no remote vector. A fix is availabl...
CVE-2025-9675
The CVE-2025-9675 entry affects the Voice Changer App up to version 1.1.0 and specifically the AndroidManifest.xml handling in the component com.tuyangkeji.changevoice. The underlying issue is improper export of Android application components due to some unknown processing of that manifest file, ...
CVE-2025-9672
The CVE-2025-9672 entry affects Rejseplanen App (package de.hafas.android.rejseplanen) up to version 8.2.2. The vulnerability arises from an improper export of AndroidManifest.xml components in the app, enabling a local attack. Public exploit details exist, and there was no response from the vend...
Malicious code in jito-components (npm)
The package jito-components was found to contain malicious code...
MAL-2025-42016 Malicious code in jito-components (npm)
The package jito-components was found to contain malicious code...
Malicious code in blocks-web-components (npm)
The package blocks-web-components was found to contain malicious code...
MAL-2025-41948 Malicious code in blocks-web-components (npm)
The package blocks-web-components was found to contain malicious code...
PT-2025-35310
Name of the Vulnerable Software and Affected Versions: Kakao Hey Kakao App versions up to 2.17.4 Description: A vulnerability exists in the Kakao Hey Kakao App on Android, affecting an unknown functionality within the AndroidManifest.xml file of the com.kakao.i.connect component. This issue resul...
CVE-2025-31972
HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker unauthorized access to sensitive data transmitted between internal components...
CVE-2025-31972
HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker unauthorized access to sensitive data transmitted between internal components...
CVE-2025-31972
CVE-2025-31972 affects HCL BigFix SM. It describes a sensitive information exposure due to internal connections not using TLS, allowing potential disclosure of data between internal components. CVSS 3.1 base score 6.5 (MEDIUM); attack vector adjacent, attack complexity low, privileges required no...
MAL-2025-41967 Malicious code in design-system-components-angular-workspace (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @rbapp/components (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-41925 Malicious code in @rbapp/components (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-41915 Malicious code in @rbacore/components (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in @rbacore/components (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-41543 Malicious code in com.db.internetportal.es.olb-crossover-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d663acd7f33114b8fd15402308edcdbf8546ceeaf53aec128737ac8b324f4ead Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in com.db.internetportal.es.olb-crossover-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d663acd7f33114b8fd15402308edcdbf8546ceeaf53aec128737ac8b324f4ead Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...