Fourteen_Endpoints

Les intermédiaires Sociétés-écrans au cœur du relais de confidentialité d'Apple Une LLC anonyme du Delaware publie une application de prière biblique, un journal intime quotidien et un outil d'identification de l'appelant sur l'App Store. Cette entité exploite une infrastructure de relais chiffré...

flash-exploit-defense-system

flash-exploit-defense-system Système de défense complet multicouche contre les exploits CVE d'Adobe Flash CVE-2012-0754, CVE-2015-xxxx, CVE-2016-xxxx, CVE-2018-xxxx avec protection au niveau navigateur, mobile, serveur et système...

CVE-2025-46018-CSC-Pay-Mobile-App-Payment-Authentication-Bypass

CVE-2025-46018 – Contournement d’authentification de paiement dans l’application mobile CSC Pay Résumé Une vulnérabilité de contournement d’authentification de paiement a été découverte dans l’application mobile CSC Pay, affectant la version 2.19.4. Cette faille permettait à un attaquant de lance...

nextcloud_android

تطبيق Nextcloud لنظام Android Codacy Badge عميل Android لـNextcloud. اعمل بسهولة مع بياناتك على سحابتك Nextcloud. كيفية المساهمة إذا كنت ترغب في المساهمة في Nextcloud، فأنت مرحب بك جدًا: على قنوات IRC الخاصة بنا و على شبكة freenode منتدانا على https://help.nextcloud.com لترجمات التطبيق على...

Hippoo-Mobile-App-For-WooCommerce-CVE-Report

Rapport CVE pour Hippoo Mobile App for WooCommerce Divulgation pour CVE-2025-13339 CVE-2025-13339 - Vulnérabilité dans Hippoo Mobile App for WooCommerce Ce dépôt divulgue une vulnérabilité découverte dans Hippoo Mobile App for WooCommerce = 1.6.1, un plugin WordPress développé par hippooo. 🛠...

SafeForge

SafeForge – حيث تُبنى التطبيقات بالثقة SafeForge هو مركز تطبيقات جوال مفتوح المصدر مبني على GitLab يتيح للمطورين بناء وتحميل ومشاركة والتعاون على تطبيقات الجوال في نظام بيئي آمن، مُدقق بالذكاء الاصطناعي، ومُشفر بالكامل. كل تطبيق يُقدم إلى SafeForge يُحلل باستخدام طبقة أمان تعتمد على الذكاء...

CVE-2024-50477

CVE-2024-50477 Stacks Mobile App Builder = 5.2.3 - ثغرة تجاوز المصادقة عبر الاستيلاء على الحساب الوصف: إن إضافة Stacks Mobile App Builder – وهي أقوى إضافة لبناء تطبيقات الجوال بالسحب والإفلات لووردبريس – تحتوي على ثغرة تسمح بتجاوز المصادقة في جميع الإصدارات حتى 5.2.3. يرجع ذلك إلى أن الإضافة لا...

WordPress WP Mobile Menu plugin 2.7.4-2.8 - Stored XSS vulnerability

Stored XSS vulnerability discovered by Het Kalariya in WordPress Plugin WP Mobile Menu versions 2.7.4-2.8...

[SECURITY] Fedora 45 Update: mobile-broadband-provider-info-20240407-7.fc45

The mobile-broadband-provider-info package contains listings of mobile broadband 3G providers and associated network and plan information...

Why Mobile Device Management Needs Its Own Threat Model

Allowing employees to use their own phones for work sounds simple. Deciding how much control IT should have…...

Convincing Free Mobile phishing emails appear after data breach

Free Mobile, one of France’s main cellular providers, was fined €27 million by France’s data protection regulator, the CNIL, in January over failures to protect customer data. The October 2024 breach allowed an unauthorized party to access sensitive customer records, including bank account detail...

Convincing Free Mobile phishing emails appear after data breach

Free Mobile, one of France’s main cellular providers, was fined €27 million by France’s data protection regulator, the CNIL, in January over failures to protect customer data. The October 2024 breach allowed an unauthorized party to access sensitive customer records, including bank account detail...

CVE-2026-89047

The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

EUVD-2026-90543

The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-89047 Social Media Share Buttons & Social Sharing Icons <= 3.0.1 - Reflected DOM-Based Cross-Site Scripting via URL

The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-89047

The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting (XSS) via URL in versions up to and including 3.0.1 . The root cause is insufficient input sanitization and output escaping . Unauthenticated attackers can inject a...

PT-2026-103718

Name of the Vulnerable Software and Affected Versions Social Media Share Buttons & Social Sharing Icons versions prior to 3.0.2 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected Cross-Site Scripting XSS, a technique where maliciou...

CVE-2026-89047: Improper Neutralization of Input During Web Page Generation

The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-91832

The WP Mobile Menu WordPress plugin before 2.9 does not correctly verify the nonce on its settings import, so an attacker can import arbitrary WP Mobile Menu WordPress plugin before 2.9 settings through a cross-site request in an administrator's session, and the imported values are then output...

CVE-2026-91832

The WP Mobile Menu WordPress plugin (versions before 2.9 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to correctly verify the nonce during the settings import process. An attacker can exploit this via a cross-site request during an administrator's session to ...