CVE-2024-45353: Origin Validation Error

An intent redriction vulnerability exists in the Xiaomi quick App framework application product. The vulnerability is caused by improper input validation and can be exploited by attackers tointent redriction...

PT-2025-13043

Name of the Vulnerable Software and Affected Versions Xiaomi Quick App framework affected versions not specified Description The issue is related to a redirección de intención vulnerability in the framework, caused by improper input validation. This can be exploited by attackers to redirect the...

CVE-2024-45354: Origin Validation Error

A code execution vulnerability exists in the Xiaomi shop applicationproduct. The vulnerability is caused by improper input validation and can be exploited by attackers to execute malicious code...

PT-2025-13026 · Xiaomi · Xiaomi Smarthome Application

Name of the Vulnerable Software and Affected Versions: Xiaomi smarthome application affected versions not specified Description: A code execution issue exists due to improper input validation, allowing attackers to execute malicious code. Recommendations: At the moment, there is no information...

Xiaomi shop 访问控制错误漏洞

Xiaomi shop is a shopping app from Chinese company Xiaomi Xiaomi that allows users to purchase various products from Xiaomi and its ecosystem companies, including cell phones, smart hardware, home appliances, and more. A security vulnerability exists in Xiaomi shop that stems from improper input...

CVE-2025-30355: Improper Input Validation

Synapse is an open source Matrix homeserver implementation. A malicious server can craft events which, when received, prevent Synapse version up to 1.127.0 from federating with other servers. The vulnerability has been exploited in the wild and has been fixed in Synapse v1.127.1. No known...

xfrm Component DoS

The vulnerability of the xfrm component in the Linux operating system’s kernel is related to improper input validation. Exploiting this vulnerability can allow an attacker to cause a service failure...

Ceph Kernel DoS

The vulnerability of the ceph kernel component in the Linux operating system is related to improper input validation. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-13044

Name of the Vulnerable Software and Affected Versions Xiaomi shop application affected versions not specified Description A code execution issue exists due to improper input validation, allowing attackers to execute malicious code. Recommendations At the moment, there is no information about a...

CVE-2024-45351

A code execution vulnerability exists in the Xiaomi Game center application product. The vulnerability is caused by improper input validation and can be exploited by attackers to execute malicious code...

CVE-2024-45351 Game center application has code execution Vulnerability

A code execution vulnerability exists in the Xiaomi Game center application product. The vulnerability is caused by improper input validation and can be exploited by attackers to execute malicious code...

CVE-2024-45351 Game center application has code execution Vulnerability

A code execution vulnerability exists in the Xiaomi Game center application product. The vulnerability is caused by improper input validation and can be exploited by attackers to execute malicious code...

Arbitrary File Overwrite

H2O-3 is vulnerable to Arbitrary File Overwrite. The vulnerability is due to improper input validation due to the exportModelDetails function in ModelsHandler.java allowing user-controlled input in the mexport.dir parameter, enabling overwriting files at arbitrary locations on the host system...

Security Bulletin: Multiple security vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.

Summary jQuery is used by IBM Robotic Process Automation for Cloud Pak as part of Abbyy CVE-2015-9251, CVE-2019-11358, CVE-2020-11022, CVE-2020-11023, CVE-2020-23064. Kubernetes kube-apiserver is used by IBM Robotic Process Automation for Cloud Pak as part of the operator CVE-2020-8552. Go Go-Yam...

Xiaomi Game center 安全漏洞

Xiaomi Game center is an application marketplace software from Chinese company Xiaomi Xiaomi. A security vulnerability exists in Xiaomi Game center version 13.10, which stems from improper input validation and could lead to the execution of malicious code...

CVE-2025-20227: Improper Input Validation

In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and Splunk Cloud Platform versions below 9.3.2408.107, 9.2.2406.112, 9.2.2403.115, 9.1.2312.208 and 9.1.2308.214, a low-privileged user that does not hold the "admin" or "power" Splunk roles could bypass the external content...

CVE-2025-1440: Improper Input Validation

The Advanced iFrame plugin for WordPress is vulnerable to unauthorized excessive creation of options on the aipmapurlcallback function in all versions up to, and including, 2024.5 due to insufficient restrictions. This makes it possible for unauthenticated attackers to update the...

CVE-2025-1514: Improper Input Validation

The Active Products Tables for WooCommerce. Use constructor to create tables plugin for WordPress is vulnerable to unauthorized filter calling due to insufficient restrictions on the getsmth function in all versions up to, and including, 1.0.6.7. This makes it possible for unauthenticated attacke...

CVE-2024-45351: Improper Validation of Specified Quantity in Input

A code execution vulnerability exists in the Xiaomi Game center application product. The vulnerability is caused by improper input validation and can be exploited by attackers to execute malicious code...

PT-2025-12887

Name of the Vulnerable Software and Affected Versions Xiaomi Game Center Application version 13.10 Description A code execution issue exists due to improper input validation, allowing attackers to execute malicious code. Recommendations For Xiaomi Game Center Application version 13.10, update to ...