1782 matches found
CVE-2025-25330
An issue in Boohee Technology Boohee Health iOS 13.0.13 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2025-25333
An issue in IKEA CN iOS 4.13.0 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2025-25323
An issue in Qianjin Network Information Technology Shanghai Co., Ltd 51Job iOS 14.22.0 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2025-25330: Improper Neutralization of Encoded URI Schemes in a Web Page
An issue in Boohee Technology Boohee Health iOS 13.0.13 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2025-25334
The Suning EMall iOS application, specifically version 9.5.198 , is vulnerable to an issue involving the improper neutralization of encoded URI schemes in a web page (CWE-84). This flaw allows an attacker to access sensitive user information by providing a crafted link. Exploitation of this vulne...
CVE-2025-25326
An issue in Merchants Union Consumer Finance Company Limited Merchants Union Finance iOS 6.19.0 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2025-25329
Tencent MicroVision version 8.137.0 on iOS is vulnerable to an issue where attackers can access sensitive user information by providing a crafted link . This vulnerability is associated with CWE-84 (Improper Neutralization of Encoded URI Schemes in a Web Page). To mitigate this risk, it is recomm...
CVE-2025-25333
An issue in IKEA CN iOS 4.13.0 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2025-25334
An issue in Suning Commerce Group Suning EMall iOS 9.5.198 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2025-25324
An issue in Shandong Provincial Big Data Center AiShanDong iOS 5.0.0 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2025-25331: Improper Neutralization of Encoded URI Schemes in a Web Page
An issue in Beitatong Technology LianJia iOS 9.83.50 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2025-25325: Improper Neutralization of Encoded URI Schemes in a Web Page
An issue in Yibin Fengguan Network Technology Co., Ltd YuPao DirectHire iOS 8.8.0 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2025-20118 Cisco Application Policy Infrastructure Controller Authenticated Command Injection Due to Sensitive Disclosure Vulnerability
A vulnerability in the implementation of the internal system processes of Cisco APIC could allow an authenticated, local attacker to access sensitive information on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is du...
CVE-2025-20118 Cisco Application Policy Infrastructure Controller Authenticated Command Injection Due to Sensitive Disclosure Vulnerability
A vulnerability in the implementation of the internal system processes of Cisco APIC could allow an authenticated, local attacker to access sensitive information on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is du...
ROS-20250226-17
A vulnerability in the crypto-elliptic component of the Golang programming language is related to uncontrolled resource consumption. resource consumption. Exploitation of the vulnerability could allow an attacker to gain access to sensitive information...
CVE-2025-27133
WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was discovered in the WeGIA application prior to version 3.2.15 at the adicionartipoexame.php endpoint. This vulnerability allows an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive...
CVE-2025-27133 WeGIA has SQL Injection endpoint at 'dao/pet/adicionar_tipo_exame.php' parameter 'tipo_exame'
WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was discovered in the WeGIA application prior to version 3.2.15 at the adicionartipoexame.php endpoint. This vulnerability allows an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive...
CVE-2025-27133
CVE-2025-27133 affects WeGIA (Web manager for charitable institutions) prior to version 3.2.15. A SQL injection vulnerability exists at the adicionar_tipo_exame.php endpoint, parameter tipo_exame, allowing an authorized attacker to execute arbitrary SQL queries and access sensitive information. T...
CVE-2025-27133: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was discovered in the WeGIA application prior to version 3.2.15 at the adicionartipoexame.php endpoint. This vulnerability allows an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive...
