nextcloud_android

Nextcloud 안드로이드 앱 Codacy Badge Nextcloud를 위한 안드로이드 클라이언트입니다. Nextcloud에서 데이터를 쉽게 작업하세요. 기여하는 방법 Nextcloud에 기여하고 싶으시다면 환영합니다: freenode의 IRC 채널 및 에서 포럼 https://help.nextcloud.com 앱 번역은 Transifex에서 이슈 및 PR 열기 해당 이슈 포함 기여 지침 및 라이선스 GPLv2입니다. 2016년 6월 16일 이후 이 저장소에 대한 모든 기여는 AGPLv3 또는 그 이후 버전에 따라 라이선스...

Hippoo-Mobile-App-For-WooCommerce-CVE-Report

Hippoo-Mobile-App-for-WooCommerce-CVE-Report CVE-2025-13339 공개 CVE-2025-13339 - Hippoo Mobile App for WooCommerce 취약점 이 저장소는 hippooo가 개발한 WordPress 플러그인인 Hippoo Mobile App for WooCommerce = 1.6.1에서 발견된 취약점을 공개합니다. 🛠 영향받는 버전 제품 : Hippoo Mobile App for WooCommerce 버전 : v1.6.1 URL :...

SafeForge

SafeForge – 앱이 신뢰로 구축되는 곳 SafeForge는 GitLab 기반의 오픈소스 모바일 앱 허브 로, 개발자들이 안전하고 AI가 검증하며 완전히 암호화된 생태계 에서 모바일 애플리케이션을 구축, 업로드, 공유 및 협업할 수 있도록 합니다. SafeForge에 제출된 모든 애플리케이션은 배포 전에 맬웨어, 스파이웨어, 숨겨진 백도어, 암호화폐 채굴기 및 기타 악성 또는 안전하지 않은 행위를 탐지하도록 설계된 AI 기반 보안 계층을 사용하여 분석됩니다. 이 플랫폼은 신뢰, 투명성, 검증 가능한 안전성 을 중심으로...

CVE-2024-50477

CVE-2024-50477 Stacks Mobile App Builder = 5.2.3 - 인증 우회를 통한 계정 탈취 설명: Stacks Mobile App Builder – WordPress용 가장 강력한 모바일 애플리케이션 드래그 앤 드롭 빌더 플러그인은 버전 5.2.3 이하에서 인증 우회에 취약합니다. 이는 플러그인이 receiverequestcheckout 함수를 통해 인증하기 전에 사용자의 신원을 제대로 확인하지 않기 때문입니다. 이로 인해 인증되지 않은 공격자가 사용자 ID를 기반으로 모든 사용자로 로그인할 수...

WordPress WP Mobile Menu plugin 2.7.4-2.8 - Stored XSS vulnerability

Stored XSS vulnerability discovered by Het Kalariya in WordPress Plugin WP Mobile Menu versions 2.7.4-2.8...

MobileApp-Pentest-Cheatsheet

モバイルアプリケーションペネトレーションテストチートシート Mobile App Pentest チートシートは、モバイルアプリケーションペネトレーションテストの特定のトピックとチェックリストに関する価値の高い情報を簡潔にまとめるために作成されました。ペンテストの実施にあたり、OWASP Mobile Risk Top 10 に対応付けられています。 モバイルアプリケーションセキュリティテスト用ディストリビューション オールインワンモバイルセキュリティフレームワーク Androidアプリケーションペネトレーションテスト リバースエンジニアリングと静的解析 動的解析とランタイム解析...

CVE-2025-1910-WatchGuard-Privilege-Escalation

WatchGuard Mobile VPN with SSL 클라이언트 권한 상승 CVE-2025-1910 WatchGuard의 Mobile VPN with SSL MD5SUM Pack into a .wgssl file tar -czf ../clientexploit.wgssl client.ovpn MD5SUM run.bat cd .. 5. flask를 사용하여 악성 client.wgssl 파일을 제공합니다: Start the flask HTTPS server sudo python3 srv.py 선택적으로 openssl을 통해 새...

[SECURITY] Fedora 45 Update: mobile-broadband-provider-info-20240407-7.fc45

The mobile-broadband-provider-info package contains listings of mobile broadband 3G providers and associated network and plan information...

Why Mobile Device Management Needs Its Own Threat Model

Allowing employees to use their own phones for work sounds simple. Deciding how much control IT should have…...

Convincing Free Mobile phishing emails appear after data breach

Free Mobile, one of France’s main cellular providers, was fined €27 million by France’s data protection regulator, the CNIL, in January over failures to protect customer data. The October 2024 breach allowed an unauthorized party to access sensitive customer records, including bank account detail...

Convincing Free Mobile phishing emails appear after data breach

Free Mobile, one of France’s main cellular providers, was fined €27 million by France’s data protection regulator, the CNIL, in January over failures to protect customer data. The October 2024 breach allowed an unauthorized party to access sensitive customer records, including bank account detail...

CVE-2026-89047

The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

EUVD-2026-90543

The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-89047 Social Media Share Buttons & Social Sharing Icons <= 3.0.1 - Reflected DOM-Based Cross-Site Scripting via URL

The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-89047

The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting (XSS) via URL in versions up to and including 3.0.1 . The root cause is insufficient input sanitization and output escaping . Unauthenticated attackers can inject a...

PT-2026-103718

Name of the Vulnerable Software and Affected Versions Social Media Share Buttons & Social Sharing Icons versions prior to 3.0.2 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected Cross-Site Scripting XSS, a technique where maliciou...

CVE-2026-89047: Improper Neutralization of Input During Web Page Generation

The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-91832

The WP Mobile Menu WordPress plugin before 2.9 does not correctly verify the nonce on its settings import, so an attacker can import arbitrary WP Mobile Menu WordPress plugin before 2.9 settings through a cross-site request in an administrator's session, and the imported values are then output...

CVE-2026-91832

The WP Mobile Menu WordPress plugin (versions before 2.9 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to correctly verify the nonce during the settings import process. An attacker can exploit this via a cross-site request during an administrator's session to ...

CVE-2026-91832 WP Mobile Menu 2.7.4 - 2.8.8 - Stored XSS via CSRF

The WP Mobile Menu WordPress plugin before 2.9 does not correctly verify the nonce on its settings import, so an attacker can import arbitrary WP Mobile Menu WordPress plugin before 2.9 settings through a cross-site request in an administrator's session, and the imported values are then output...