WhatsApp Patches Zero-Click Exploit Targeting iOS and macOS Devices

WhatsApp has addressed a security vulnerability in its messaging apps for Apple iOS and macOS that it said may have been exploited in the wild in conjunction with a recently disclosed Apple flaw in targeted zero-day attacks. The vulnerability, CVE-2025-55177 CVSS score: 5.4, relates to a case of...

Linux Distros Unpatched Vulnerability : CVE-2022-26359

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IOMMU: RMRR VT-d and unity map AMD-Vi handling issues This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2018-4192

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTun...

Linux Distros Unpatched Vulnerability : CVE-2018-4129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes...

Linux Distros Unpatched Vulnerability : CVE-2017-13796

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTun...

Linux Distros Unpatched Vulnerability : CVE-2020-25595

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen through 4.14.x. The PCI passthrough code improperly uses register data. Code paths in Xen's MSI handling have been identified tha...

Fake Facebook Ads Push Brokewell Spyware to Android Users

A Facebook malvertising campaign is spreading the Brokewell spyware to Android users via fake TradingView ads. The malware…...

CVE-2025-9605 Tenda AC21/AC23 GetParentControlInfo stack-based overflow

A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. Such manipulation of the argument mac leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has...

iND多款产品 安全漏洞

The iND HL330-DLS and others are an embedded hardware terminal from iND Japan. A security vulnerability exists in several iND products. The vulnerability stems from the insecure storage of sensitive information, which may lead to the disclosure of configuration information. The following products...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 : UDisks vulnerability (USN-7723-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by a vulnerability as referenced in the USN-7723-1 advisory. Michael Imfeld discovered that UDisks did not check the validity of input data correctly when...

The vulnerability of software products for configuring, calibrating, and diagnosing FIELDVUE Emerson ValveLink devices lies in the unencrypted storage of confidential information, allowing attackers to compromise the confidentiality and integrity of the protected data.

The vulnerability of FIELDVUE Emerson ValveLink software products regarding setup, calibration, and diagnostics is related to the unencrypted storage of confidential information. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected...

The vulnerability of microprogrammed control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact models CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150 lies in the lack of access control mechanisms. This allows attackers to elevate their privileges to the root level.

The vulnerability of the microprogrammed control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact, models CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150, stems from deficiencies in access control. Exploiting this vulnerability could allow...

The vulnerability of microprogrammed control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact’s CHARX SEC-3000 models lies in the absence of authentication procedures, allowing unauthorized access to read or write data.

The vulnerability of the microprogrammed control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact’s CHARX SEC-3000 is related to the absence of authentication procedures. Exploiting this vulnerability could allow an intruder to gain unauthorized access to re...

iND多款产品 操作系统命令注入漏洞

The iND HL330-DLS and iND LM-100 are both embedded hardware terminals from Japan-based iND Corporation. Operating system command injection vulnerability exists in several iND products. The vulnerability stems from OS command injection, which may result in executing arbitrary commands or obtaining...

The vulnerabilities in the implementation of the Intermediate System-to-Intermediate System (IS-IS) routing protocol in the Cisco NX-OSS operating system of Cisco Nexus 3000 and Nexus 9000 devices allow a attacker to cause service interruptions.

The vulnerability of the Intermediate System-to-Intermediate System IS-IS routing protocol implementation in the Cisco NX-OSS operating system of Cisco Nexus 3000 and Nexus 9000 devices is related to errors in the compiler optimization process. Exploiting this vulnerability allows a malicious act...

The vulnerability of the Eichrecht() function in the microprogrammable control devices for variable current charging stations and wall-mounted charging devices from Phoenix Contact, models CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150, allows a intruder to trigger a service failure.

The vulnerability of the Eichrecht function in microprogrammed control modules for AC charging stations and wall-mounted charging devices from Phoenix Contact, models CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150, is related to insufficient validation of input data. Exploitin...

The vulnerability of the Eichrecht() function in microprogrammed software-based modular control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact’s CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150 models allows a intruder to influence the integrity and accessibility of protected information.

The vulnerability of the Eichrecht function in microprogrammed control devices for variable current charging stations and wall-mounted charging devices from Phoenix Contact models CHARX SEC-3000, CHARX SEC-3050, CHARX SEC-3100, and CHARX SEC-3150 lies in the copying of buffers without checking th...

The vulnerability of the microprogrammed software of modular control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact’s CHARX SEC-3000 is related to insufficient control of resources with dynamic management. This vulnerability allows a perpetrator to execute arbitrary code.

The vulnerability of the microprogrammed software in modular control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact, the CHARX SEC-3000, is related to insufficient control of resources with dynamic management. Exploiting this vulnerability could allow an...

The vulnerability of the microprogramming software in the RUGGEDCOM RST2428P routing and switching platform, SCALANCE XC-300 Series, SCALANCE XC-400 Series, SCALANCE XCM-/XRM-/XCH-/XRH-300 Series, SCALANCE XM-400/XR-500 Series, SCALANCE XR-300 (6GK5334-xTSxx) Series, is related to insecure privilege management. This vulnerability allows attackers to compromise the integrity of protected information.

The vulnerability of the microprogramming software in the RUGGEDCOM RST2428P, SCALANCE XC-300 Series, SCALANCE XC-400 Series, SCALANCE XCM-/XRM-/XCH-/XRH-300 Series, SCALANCE XM-400/XR-500 Series, and SCALANCE XR-300 6GK5334-xTSxx Series devices is related to insecure privilege management...

The vulnerability of the web interface of the microprogramming software for the routing and switching platform RUGGEDCOM RST2428P, SCALANCE XC-300 Series, SCALANCE XC-400 Series, SCALANCE XCM-/XRM-/XCH-/XRH-300 Series, SCALANCE XM-400/XR-500 Series, SCALANCE XR-300 (6GK5334-xTSxx) Series, allows a attacker to cause a service failure.

The vulnerability of the web interface of the microprogramming software for the RUGGEDCOM RST2428P, SCALANCE XC-300 Series, SCALANCE XC-400 Series, SCALANCE XCM-/XRM-/XCH-/XRH-300 Series, SCALANCE XM-400/XR-500 Series, and SCALANCE XR-300 6GK5334-xTSxx Series devices is related to deficiencies in...