279 matches found
EUVD-2022-5258
Malicious code in bioql PyPI...
EUVD-2022-27766
Malicious code in bioql PyPI...
EUVD-2022-27767
Malicious code in bioql PyPI...
CVE-2025-58055 Discourse AI Suggestions Contain Insecure Direct Object Reference
Discourse is an open-source community discussion platform. In versions 3.5.0 and below, the Discourse AI suggestion endpoints for topic “Title”, “Category”, and “Tags” allowed authenticated users to extract information about topics that they weren’t authorized to access. By modifying the “topicid...
CVE-2025-58055
Discourse vulnerability CVE-2025-58055 affects version 3.5.0 and earlier, where AI suggestion endpoints for Title, Category, and Tags can disclose information from restricted topics by altering topic_id in API requests. The root cause is improper access control at the AI helper endpoints, enablin...
PT-2025-40289
Name of the Vulnerable Software and Affected Versions Discourse versions 3.5.0 and below Description Discourse, an open-source community discussion platform, had an issue where authenticated users could access information about topics they were not authorized to view. This occurred through the AI...
CVE-2025-10765 SeriaWei ZKEACMS SEOSuggestions ZKEACMS.SEOSuggestions.dll server-side request forgery
A security flaw has been discovered in SeriaWei ZKEACMS up to 4.3. This vulnerability affects the function CheckPage/Suggestions in the library cms-v4.3\wwwroot\Plugins\ZKEACMS.SEOSuggestions\ZKEACMS.SEOSuggestions.dll of the component SEOSuggestions. Performing manipulation results in server-sid...
CVE-2025-24133
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 26 and iPadOS 26. Keyboard suggestions may display sensitive information on the lock screen...
CVE-2025-24133
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2025-24133
Affected software/hardware: Apple iOS and iPadOS. Vulnerability: keyboard suggestions may display sensitive information on the lock screen. Root cause: restrictions on options offered on a locked device; potential exposure of user data when the device is locked. Impact: could allow unauthorized v...
PT-2025-37778
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 26 iPadOS versions prior to 26 Description: Keyboard suggestions may display sensitive information on the lock screen. This issue was addressed by restricting options offered on a locked device. Recommendations: Update t...
metasploit-framework
This repository is an offensive tool for Metasploit Framework. It is a collection of files and workflows used to build and test the Metasploit Framework, a penetration testing tool. The repository contains various templates for reporting issues, suggesting new features, and submitting pull...
CVE-2025-36759
CVE-2025-36759 affects SolaX Cloud. The vulnerability stems from the username-suggestion feature that can reveal other users’ emails and phone numbers. Impact is information disclosure of user contact data (confidentiality HIGH). Connected sources confirm SolaX Cloud and the leakage via similar a...
CVE-2023-21479
Improper authorization in Smart suggestions prior to SMR Apr-2023 Release 1 in Android 13 and 4.1.01.0 in Android 12 allows remote attackers to register a schedule...
CVE-2023-21479
Improper authorization in Smart suggestions prior to SMR Apr-2023 Release 1 in Android 13 and 4.1.01.0 in Android 12 allows remote attackers to register a schedule...
CVE-2023-21479
Improper authorization in Smart suggestions prior to SMR Apr-2023 Release 1 in Android 13 and 4.1.01.0 in Android 12 allows remote attackers to register a schedule...
CVE-2023-21479
CVE-2023-21479 affects Samsung/Android devices due to an improper authorization weakness in Smart suggestions. The issue allows remote attackers to register a schedule on affected builds. Affected software includes Android 13 prior to SMR Apr-2023 Release 1 and Android 12 with 4.1.01.0. Remediati...