CVE-2025-25325

An issue in Yibin Fengguan Network Technology Co., Ltd YuPao DirectHire iOS 8.8.0 allows attackers to access sensitive user information via supplying a crafted link...

SUSE CVE-2022-49369

In the Linux kernel, the following vulnerability has been resolved: amt: fix possible memory leak in amtrcv If an amt receives packets and it finds socket. If it can't find a socket, it should free a received skb. But it doesn't. So, a memory leak would possibly occur...

CVE-2025-25330

An issue in Boohee Technology Boohee Health iOS 13.0.13 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-25330

An issue in Boohee Technology Boohee Health iOS 13.0.13 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-25325

An issue in Yibin Fengguan Network Technology Co., Ltd YuPao DirectHire iOS 8.8.0 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-25323

An issue in Qianjin Network Information Technology Shanghai Co., Ltd 51Job iOS 14.22.0 allows attackers to access sensitive user information via supplying a crafted link...

PT-2025-8969

Name of the Vulnerable Software and Affected Versions Beitatong Technology LianJia version 9.83.50 Description The issue allows attackers to access sensitive user information by supplying a crafted link. Recommendations For version 9.83.50, update to a newer version that contains a fix for this...

CVE-2025-25331

An issue in Beitatong Technology LianJia iOS 9.83.50 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-25331

An issue in Beitatong Technology LianJia iOS 9.83.50 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-25323

An issue in Qianjin Network Information Technology Shanghai Co., Ltd 51Job iOS 14.22.0 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-25329

Tencent MicroVision version 8.137.0 on iOS is vulnerable to an issue where attackers can access sensitive user information by providing a crafted link . This vulnerability is associated with CWE-84 (Improper Neutralization of Encoded URI Schemes in a Web Page). To mitigate this risk, it is recomm...

CVE-2025-25331: Improper Neutralization of Encoded URI Schemes in a Web Page

An issue in Beitatong Technology LianJia iOS 9.83.50 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-25325

An issue in Yibin Fengguan Network Technology Co., Ltd YuPao DirectHire iOS 8.8.0 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-25331

The Beitatong Technology LianJia mobile application for iOS, specifically version 9.83.50 , is vulnerable to an issue that allows attackers to access sensitive user information by providing a crafted link . The vulnerability is categorized as Improper Neutralization of Encoded URI Schemes in a We...

CVE-2025-25325

The YuPao DirectHire recruiting software, specifically version 8.8.0 for iOS , contains a security vulnerability that allows attackers to access sensitive user information . The root cause is identified as the Improper Neutralization of Encoded URI Schemes in a Web Page (CWE-84), which can be tri...

Intel QuickAssist Technology QAT Input Output Subsystem Unauthorized Access

The vulnerability of the input/output subsystem of the Intel QuickAssist Technology QAT driver package is related to the use of a non-trusted pointer. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Security Bulletin: There are multiple vulnerabilities in IBM SDK, Java Technology Edition that is shipped with CICS Transaction Gateway for Multiplatforms (CVE-2023-22045 and CVE-2023-22049).

Summary There are multiple vulnerabilities in IBM SDK, Java Technology Edition that is shipped with CICS Transaction Gateway for Multiplatforms CVE-2023-22045 and CVE-2023-22049. An update to CICS Transaction Gateway for Multiplatforms has been released to address these vulnerabilities...

CVE-2025-0545

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...

UBUNTU-CVE-2022-49369

In the Linux kernel, the following vulnerability has been resolved: amt: fix possible memory leak in amtrcv If an amt receives packets and it finds socket. If it can't find a socket, it should free a received skb. But it doesn't. So, a memory leak would possibly occur...

FatalRAT Phishing Attacks Target APAC Industries Using Chinese Cloud Services

Various industrial organizations in the Asia-Pacific APAC region have been targeted as part of phishing attacks designed to deliver a known malware called FatalRAT. "The threat was orchestrated by attackers using legitimate Chinese cloud content delivery network CDN myqcloud and the Youdao Cloud...