CVE-2024-56950

An issue in KuGou Technology Co., Ltd KuGou Concept iOS 4.0.61 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56955

An issue in Tencent QQMail for iOS version 6.6.4 allows attackers to access sensitive user information by supplying a crafted link . The vulnerability is associated with CWE-601 (URL Redirection to Untrusted Site) and CWE-922 (Insecure Storage of Sensitive Information). While some records indicat...

CVE-2024-56969

An issue in Pixocial Technology (Singapore) Pte. Ltd BeautyPlus version iOS 7.8.010 allows attackers to access sensitive user information by supplying a crafted link . Rapid7 identifies this as a URL Redirection to Untrusted Site . While specific exploitation details are not provided, the documen...

CVE-2024-56955

An issue in Tencent Technology Shenzhen Company Limited QQMail iOS 6.6.4 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56950

An issue in KuGou Technology Co., Ltd KuGou Concept iOS 4.0.61 allows attackers to access sensitive user information via supplying a crafted link...

The vulnerability of microprogrammed software in PLANET Technology switches, related to a countable loss of significance, allows attackers to trigger a service failure.

The vulnerability of PLANET Technology’s microprogrammed software is related to a countable degree of significance loss. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures through a specially created malicious HTTP request...

Vulnerability of microprogrammed software in PLANET Technology switches, related to buffer overflow in the stack, allowing a hacker to execute arbitrary code.

The vulnerability of PLANET Technology’s microprogrammed switching software is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted HTTP request...

PT-2025-5488 · Enituretechnology · Enituretechnology Small Package Quotes – Worldwide Express Edition

Name of the Vulnerable Software and Affected Versions: Eniture Technology Small Package Quotes – Worldwide Express Edition versions 5.2.17 and earlier Description: The issue is related to improper neutralization of special elements used in an SQL command, allowing SQL injection. This means an...

CVE-2024-56947

An issue in Xiamen Meitu Technology Co., Ltd. BeautyCam iOS v12.3.60 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56960

An issue in Tianjin Xiaowu Information technology Co., Ltd BeiKe Holdings iOS 1.3.50 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56962

An issue in Tencent Technology Shanghai Co., Ltd WeSing iOS v9.3.39 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56971

An issue in Zhiyuan Yuedu Guangzhou Literature Information Technology Co., Ltd Shuqi Novel iOS 5.3.8 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56962

An issue in Tencent Technology Shanghai Co., Ltd WeSing iOS v9.3.39 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56951

An issue in Hangzhou Bobo Technology Co Ltd UU Game Booster iOS 10.6.13 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56962

An issue in Tencent Technology (Shanghai) Co., Ltd WeSing iOS v9.3.39 allows attackers to access sensitive user information by providing a crafted link . The vulnerability is associated with URL Redirection to Untrusted Site (CWE-601) and Insecure Storage of Sensitive Information (CWE-922). As a ...

PT-2025-3355 · Hangzhou Bobo Technology Co · Uu Game Booster

Name of the Vulnerable Software and Affected Versions: Hangzhou Bobo Technology Co Ltd UU Game Booster version 10.6.13 Description: An issue in Hangzhou Bobo Technology Co Ltd UU Game Booster allows attackers to access sensitive user information via supplying a crafted link. Recommendations: For...

CVE-2024-56951

A security vulnerability exists in Hangzhou Bobo Technology Co Ltd UU Game Booster for iOS version 10.6.13 . An attacker can access sensitive user information by providing a crafted link . This issue is associated with CWE-601 (URL Redirection to Untrusted Site) and CWE-922 (Insecure Storage of S...

CVE-2024-56951

An issue in Hangzhou Bobo Technology Co Ltd UU Game Booster iOS 10.6.13 allows attackers to access sensitive user information via supplying a crafted link...

How to Eliminate Identity-Based Threats

Despite significant investments in advanced technologies and employee training programs, credential and user-based attacks remain alarmingly prevalent, accounting for 50-80% of enterprise breaches1,2. While identity-based attacks continue to dominate as the leading cause of security incidents, th...

About Remote Code Execution – Windows OLE (CVE-2025-21298) vulnerability

About Remote Code Execution - Windows OLE CVE-2025-21298 vulnerability. The vulnerability is from the January Microsoft Patch Tuesday. OLE Object Linking and Embedding is a technology for linking and embedding objects into other documents and objects, developed by Microsoft. A common use of this...