882 matches found
CVE-2022-46163
Travel support program is a rails app to support the travel support program of openSUSE TSP. Sensitive user data bank account details, password Hash can be extracted via Ransack query injection. Every deployment of travel-support-program below the patched version is affected. The...
Google Bans 158,000 Malicious Android App Developer Accounts in 2024
Google said it blocked over 2.36 million policy-violating Android apps from being published to the Google Play app marketplace in 2024 and banned more than 158,000 bad developer accounts that attempted to publish such harmful apps. The tech giant also noted it prevented 1.3 million apps from...
CVE-2025-24109
A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access sensitive user data...
CVE-2025-24109
A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to access sensitive user data...
CVE-2025-24109
A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access sensitive user data...
CVE-2025-24109
A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access sensitive user data...
KuGou Concept 安全漏洞
KuGou Concept is a music applet from the Chinese company Kugou KuGou. A security vulnerability exists in KuGou Concept iOS version 4.0.61, which originates from an attacker who can access sensitive user information by providing a carefully crafted link...
WeSing 安全漏洞
WeSing 全民K歌 is a singing program from the Chinese company WeSing 全民K歌. A security vulnerability exists in WeSing iOS version v9.3.39, which originates from an attacker who can obtain sensitive user information by providing a carefully crafted link...
PT-2025-3355 · Hangzhou Bobo Technology Co · Uu Game Booster
Name of the Vulnerable Software and Affected Versions: Hangzhou Bobo Technology Co Ltd UU Game Booster version 10.6.13 Description: An issue in Hangzhou Bobo Technology Co Ltd UU Game Booster allows attackers to access sensitive user information via supplying a crafted link. Recommendations: For...
Pixocial BeautyPlus 安全漏洞
Pixocial BeautyPlus is a photo editor from Pixocial. A security vulnerability exists in Pixocial BeautyPlus version 7.8.010, which stems from an attacker's ability to access sensitive user information by providing a carefully crafted link...
Apple macOS 安全漏洞
Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 15.3, which originates from an application that may be able to access sensitive user data...
KuGou Music 安全漏洞
KuGou Music 酷狗音乐 is a music program from the Chinese company KuGou KuGou。 A security vulnerability exists in KuGou Music iOS version v20.0.0, which originates from an attacker being able to access sensitive user information by providing a carefully crafted link...
PT-2025-3363 · Tencent · Wesing
Name of the Vulnerable Software and Affected Versions: Tencent Technology Shanghai Co., Ltd WeSing iOS version 9.3.39 Description: An issue in WeSing iOS allows attackers to access sensitive user information via supplying a crafted link. Recommendations: For version 9.3.39, avoid using links from...
Xiaowu Information BeiKe Holdings 安全漏洞
Xiaowu Information BeiKe Holdings Shell is a rent and buy software from China-based Xiaowu Information. A security vulnerability exists in Xiaowu Information BeiKe Holdings version 1.3.50, which originates from an attacker being able to obtain sensitive user information by providing a carefully...
Baidu Haokan Video 安全漏洞
Baidu Haokan Video 好看视频 is a video software from the Chinese company Baidu. A security vulnerability exists in Baidu Haokan Video version 7.70.0 that originates from an attacker being able to access sensitive user information by providing a carefully crafted link...
Meitu BeautyCam 安全漏洞
Meitu BeautyCam is a photo editor from the Chinese company Meitu Meitu. A security vulnerability exists in Meitu BeautyCam version v12.3.60, which originates from an attacker being able to access sensitive user information by providing a carefully crafted link...
MAL-2025-619 Malicious code in secure-toolbots (npm)
This package contains a multi-functional infostealer malware which establishes C2 via Discord, exfiltrating sensitive user data and files and providing remote shell access to an attacker. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware...
CVE-2024-12637 Moving Users <= 1.05 - Unauthenticated Sensitive Information Exposure
The Moving Users plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.05 via the export functionality. The JSON files are stored in predictable locations with guessable file names when exporting user data. This could allow unauthenticated...
Microsoft Edge 访问控制错误漏洞
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge Chromium-based suffers from an elevation of privilege vulnerability, which can be exploited by attackers to access sensitive user data when visiting specially crafted...