CVE-2024-44271

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to record the screen without an indicator...

CVE-2024-44271

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to record the screen without an indicator...

CVE-2024-44271

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to record the screen without an indicator...

CVE-2024-44271

Apple macOS Sequoia 15.2 fixes CVE-2024-44271, where an app could record the screen without an indicator. Update to macOS Sequoia 15.2 to remediate; the issue was addressed via improved checks in the system. No exploitation details are provided beyond the CVE entry.

CVE-2024-44271

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to record the screen without an indicator...

Apple macOS Sequoia 安全漏洞

Apple macOS Sequoia is an operating system from Apple USA. A security vulnerability exists in Apple macOS Sequoia that stems from a missing indicator for screen recording...

CVE-2025-48351

Cross-Site Request Forgery CSRF vulnerability in PluginsPoint Kento Splash Screen kento-splash-screen allows Stored XSS.This issue affects Kento Splash Screen: from n/a through = 1.4...

CVE-2025-48351 WordPress Kento Splash Screen plugin <= 1.4 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in PluginsPoint Kento Splash Screen kento-splash-screen allows Stored XSS.This issue affects Kento Splash Screen: from n/a through = 1.4...

CVE-2025-48351 WordPress Kento Splash Screen plugin <= 1.4 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in PluginsPoint Kento Splash Screen kento-splash-screen allows Stored XSS.This issue affects Kento Splash Screen: from n/a through = 1.4...

CVE-2025-48351

CVE-2025-48351 describes a CSRF to Stored XSS vulnerability in the WordPress plugin “Kento Splash Screen” affecting versions up to and including 1.4. The issue arises from cross-site request forgery that can lead to stored XSS payloads, with CVSS 3.1 base metrics indicating HIGH severity (7.1) an...

WordPress plugin Kento Splash Screen 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2025-35020

Name of the Vulnerable Software and Affected Versions: Kento Splash Screen versions through 1.4 Description: A Cross-Site Request Forgery CSRF vulnerability exists in PluginsPoint Kento Splash Screen, allowing for Stored Cross-Site Scripting XSS. Recommendations: Update Kento Splash Screen to a...

Linux Distros Unpatched Vulnerability : CVE-2021-3567

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-locking applications that leverage Carib...

Linux Distros Unpatched Vulnerability : CVE-2025-46802

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session. CVE-2025-46802 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2020-27837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a us...

HOOK Android Trojan Adds Ransomware Overlays, Expands to 107 Remote Commands

Cybersecurity researchers have discovered a new variant of an Android banking trojan called HOOK that features ransomware-style overlay screens to display extortion messages. "A prominent characteristic of the latest variant is its capacity to deploy a full-screen ransomware overlay, which aims t...

MAL-2025-41846 Malicious code in @espace-client-axafr/confirmation-screen (npm)

The package communicates with a domain associated with malicious activity...

CVE-2025-55623

An issue in the lock screen component of Reolink v4.54.0.4.20250526 allows attackers to bypass authentication via using an ADB Android Debug Bridge...

Linux Distros Unpatched Vulnerability : CVE-2017-6590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in network-manager-applet aka network-manager-gnome in Ubuntu 12.04 LTS, 14.04 LTS, 16.04 LTS, and 16.10. A local attacker could use thi...

Linux Distros Unpatched Vulnerability : CVE-2016-10894

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xtrlock through 2.10 does not block multitouch events. Consequently, an attacker at a locked screen can send input to and thus control various programs such as...