2453 matches found
CVE-2025-43442
CVE-2025-43442 is an Apple iOS/iPadOS vulnerability described as a permissions issue that could allow an app to identify which other apps a user has installed. The connected Apple security content specifies the impact and fix: the issue is resolved in iOS 18.7.2 and iPadOS 18.7.2, and again in iO...
PT-2025-44876
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2. An app may be able to identify what other apps a user has installed...
Rapid7 Velociraptor Installed (Windows)
Binary data rapid7velociraptorwininstalled.nbin...
Apple多款产品 安全漏洞
Apple iOS is an operating system developed for mobile devices, Apple watchOS is an operating system for smartwatches, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in several Apple products that stems from a permissions issue that could cause an app to...
PT-2025-44871
Name of the Vulnerable Software and Affected Versions watchOS versions prior to 26.1 iOS versions prior to 26.1 iPadOS versions prior to 26.1 tvOS versions prior to 26.1 visionOS versions prior to 26.1 Description A permissions issue existed that allowed an application to potentially list the...
About the security content of iOS 26.1 and iPadOS 26.1
About the security content of iOS 26.1 and iPadOS 26.1 This document describes the security content of iOS 26.1 and iPadOS 26.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...
PT-2025-44423
Name of the Vulnerable Software and Affected Versions BLU-IC2 versions through 1.19.5 BLU-IC4 versions through 1.19.5 Description The credits page displayed in the firmware does not accurately reflect the versions in use. Recommendations For BLU-IC2 versions through 1.19.5, ensure the firmware...
CVE-2025-12461
This vulnerability allows an attacker to access parts of the application that are not protected by any type of access control. The attacker could access this path ‘…/epsilonnet/License/About.aspx’ and obtain information on both the licence and the configuration of the product by knowing which...
EUVD-2025-36637
This vulnerability allows an attacker to access parts of the application that are not protected by any type of access control. The attacker could access this path ‘…/epsilonnet/License/About.aspx’ and obtain information on both the licence and the configuration of the product by knowing which...
PT-2025-44272
Name of the Vulnerable Software and Affected Versions Affected versions not specified Description This issue allows an attacker to access application areas without proper access controls. An attacker can access the path '/epsilonnet/License/About.aspx' to obtain information about the license and...
Linux Distros Unpatched Vulnerability : CVE-2025-59024
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Crafted delegations or IP fragments can poison cached delegations in Recursor. CVE-2025-59024 Note that Nessus relies on the presence of the package as reported...
Rapid7 Velociraptor Installed (Linux)
Binary data rapid7velociraptornixinstalled.nbin...
Lynis Auditing Tool 3.1.6
Lynis is an auditing tool for Unix specialists. It scans the system and available software to detect security issues. Beside security related information it will also scan for general system information, installed packages and configuration mistakes. This software aims in assisting automated...
Dassault Systemes DELMIA Apriso Installed (Windows)
Binary data dassaultsystemesdelmiaapriso.nbin...
CVE-2025-10006 WPBakery Page Builder <= 8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'revslidervc' shortcode in all versions up to, and including, 8.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
Dell Enterprise SONiC OS Detection
Binary data dellsonicosinstalled.nbin...
MAL-2025-48305 Malicious code in tailwind-style-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 405756ca6b244b2da943e5c301d715776df3e507385f429dc2a6cf091a682931 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in nodelogex (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54f45e13513bdb340726cc75dc48eff1e5840e2d95ef3ce626397fff25e6a46c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...