PT-2025-45004

Name of the Vulnerable Software and Affected Versions CanalDenuncia.app affected versions not specified Description A lack of authorization exists in CanalDenuncia.app. An attacker can access other users' information by sending a POST request through the id sociedad parameter in the...

CanalDenuncia App 安全漏洞

CanalDenuncia App is a reporting channel application from the Spanish company CanalDenuncia. A security vulnerability exists in CanalDenuncia App, which stems from a lack of authorization checking, which allows an attacker to send a POST request to access other user information via the parameter...

CVE-2025-43395: Improper Link Resolution Before File Access

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access protected user data...

CVE-2025-43394: Improper Link Resolution Before File Access

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access protected user data...

PT-2025-44845

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.2 iPadOS versions prior to 18.7.2 Description An application may be able to access protected user data due to insufficient redaction of sensitive information. Recommendations Update to iOS version 18.7.2 or later...

PT-2025-44900

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description A permissions issue existed that allowed an application to potentially access sensitive user data. This issue was addressed through the implementation of...

PT-2025-44847

Name of the Vulnerable Software and Affected Versions macOS versions prior to 14.8.2 macOS versions prior to 15.7.2 Description A permissions issue existed due to insufficient sandbox restrictions, potentially allowing an application to access user-sensitive data. Recommendations Update to macOS...

PT-2025-44813

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description An application may be able to access user-sensitive data due to insufficient entitlement checks. Recommendations Update to macOS Sonoma version 14.8.2 or...

PT-2025-50994

Name of the Vulnerable Software and Affected Versions macOS Sonoma versions prior to 14.8.3 macOS Tahoe versions prior to 26.1 macOS Sequoia versions prior to 15.7.3 Description A flaw exists in how the operating system parses directory paths. This could allow an application to access sensitive...

PT-2025-51000

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.4 macOS Sonoma versions prior to 14.8.4 macOS Tahoe versions prior to 26.1 Description An app may be able to access sensitive user data due to improper state management. Recommendations Update macOS Sequoia...

PT-2025-44856

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description A race condition existed due to improper state handling, potentially allowing an application to access sensitive user data. Recommendations Update to macO...

PT-2025-44851

Name of the Vulnerable Software and Affected Versions macOS versions prior to 14.8.2 macOS versions prior to 15.7.2 Description An application may be able to access user-sensitive data due to insufficient entitlement checks. The issue was resolved by implementing additional entitlement checks...

PT-2025-44862

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.1 iPadOS versions prior to 26.1 Description A flaw exists due to insufficient data redaction in logging mechanisms. This could allow an application to access sensitive user data. Recommendations Update to iOS version...

PT-2025-50984

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.1 Description The software addresses an issue with improper handling of symlinks, which could allow a malicious application to delete protected user data. Recommendations Update to macOS Tahoe 26.1...

PT-2025-44837

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.7.2 Description A flaw exists in macOS that could allow an application to access user-sensitive data due to a downgrade issue affecting Intel-based Mac computers. This issue was addressed with additional code-signing...

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI versions prior to 2024R1.1.3 that stems from the disclosure o...

PT-2025-55371

Name of the Vulnerable Software and Affected Versions macOS Tahoe versions prior to 26.1 Description A permissions issue exists where an application may be able to access protected user data. This was addressed by implementing additional restrictions. Recommendations Update to macOS Tahoe 26.1...

PT-2025-44859

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.2 iPadOS versions prior to 18.7.2 Description A logging issue existed that allowed an attacker with physical access to an unlocked device paired with a Mac to view sensitive user information in system logging. The...

CVE-2025-12460

An XSS issue was discovered in Afterlogic Aurora webmail version 9.8.3 and below. An attacker can send a specially crafted HTML e-mail message with JavaScript in an img HTML tag. This could allow a remote attacker to load arbitrary JavaScript code in the context of a webmail user's browser window...

Improper Neutralization of Special Elements

Overview intugle is an A GenAI-powered Python library for building semantic layers. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements via user-supplied data. An attacker can execute arbitrary code by providing Pandas DataFrames that contain Python cod...