Lucene search
+L

35504 matches found

Cvelist
Cvelist
•added 2026/08/05 8:36 a.m.•51 views

CVE-2026-8029 SQL Injection Vulnerability in ZTE SmartLife App

The ZTE Smart Life app contains an SQL injection vulnerability that allows attackers to execute UNION SELECT statements to query sensitive data in the feedback.db database across tables, including user accounts, phone numbers, feedback content, and local debug log paths, thereby enabling the thef...

3.9CVSS0.00206EPSS
SaveExploits0References1
Circl
Circl
•added 2026/08/05 7:30 a.m.•22 views

CVE-2026-71214

creationtimestamp| type| source ---|---|--- 2026-08-05 07:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117041727081914237 2026-08-05 07:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mscyzgcese2v 2026-08-05 09:24:05+00:00| seen|...

9.8CVSS5.8AI score0.00483EPSS
SaveExploits0References3
Circl
Circl
•added 2026/08/05 6:00 a.m.•15 views

CVE-2026-9273

creationtimestamp| type| source ---|---|--- 2026-08-05 06:00:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/117041373701599609 2026-08-05 06:00:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msctyppdsc2t 2026-08-05 07:04:04+00:00| seen|...

9.3CVSS5.8AI score0.00508EPSS
SaveExploits0References5
Fedora
Fedora
•added 2026/08/05 12:58 a.m.•19 views

[SECURITY] Fedora 44 Update: perl-PAR-Packer-1.064-6.fc44

This module implements the App::Packer::Backend interface, for generating stand-alone executables, perl scripts and PAR files...

9.8CVSS7.9AI score0.00481EPSS
SaveExploits1
Citrix
Citrix
•added 2026/08/05 12:54 a.m.•65 views

Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751

Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751 The information on this page is being provided to you on an "AS IS" and "AS-AVAILABLE" basis. The issues described on this page may or may not impact your systems. Cloud Software Group, Inc. and its subsidiaries collectively, "Clou...

5.2CVSS5.4AI score0.00181EPSS
SaveExploits0
EUVD
EUVD
•added 2026/08/05 12:30 a.m.•21 views

EUVD-2026-53009

A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...

5.3CVSS5.5AI score0.0021EPSS
SaveExploits0References6
NVD
NVD
•added 2026/08/05 12:16 a.m.•17 views

CVE-2026-18853

A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...

5.3CVSS0.0021EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/05 12:00 a.m.•2 views

CVE-2026-8029: Improper Neutralization of Special Elements used in an SQL Command

The ZTE Smart Life app contains an SQL injection vulnerability that allows attackers to execute UNION SELECT statements to query sensitive data in the feedback.db database across tables, including user accounts, phone numbers, feedback content, and local debug log paths, thereby enabling the thef...

3.9CVSS6.2AI score0.00206EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/05 12:00 a.m.•4 views

CVE-2026-9190: Inconsistent Interpretation of HTTP Requests

An HTTP request smuggling vulnerability in the HTTP App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker to bypass authentication and authorization checks, hijack a legitimate user's session, or capture credentials. The vulnerability occurs when a crafted HTTP...

9.1CVSS6AI score0.00737EPSS
SaveExploits0References3
CVE
CVE
•added 2026/08/05 12:00 a.m.•72 views

CVE-2025-63822

The SirenGPS Android Application 2.19.44 is vulnerable to Incorrect Access Control . An authenticated attacker can manipulate user identifier parameters to bypass authorization controls, as the API fails to validate if the requesting user is authorized to access the target user's data. This flaw ...

8.1CVSS5.9AI score0.00386EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/05 12:00 a.m.•69 views

CVE-2025-63823

The My Safetipin Android Application 5.2.1 is affected by CVE-2025-63823 , which involves hardcoded credentials within the authentication module. This flaw allows remote attackers to bypass authentication and gain unauthorized access to user accounts by leveraging predictable OTP values . No spec...

9.8CVSS6AI score0.00813EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/05 12:00 a.m.•3 views

CVE-2026-18853: Improper Limitation of a Pathname to a Restricted Directory

A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...

5.3CVSS5.5AI score0.0021EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/05 12:00 a.m.•20 views

PT-2026-68219

Name of the Vulnerable Software and Affected Versions Progress MarkLogic Server versions prior to 11.3.6 Progress MarkLogic Server versions prior to 12.0.3 Description An authentication bypass exists in the ODBC App Server. This flaw allows an unauthenticated remote attacker to circumvent passwor...

9.8CVSS5.8AI score0.00835EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/05 12:00 a.m.•6 views

CVE-2026-9192: Improper Authentication

An authentication bypass vulnerability in the ODBC App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote attacker to bypass password verification and execute queries with the privileges of any named user known to the server, including administrators...

9.8CVSS6.1AI score0.00835EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/08/05 12:00 a.m.•11 views

CVE-2025-63823

My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication module, which allows remote attackers to bypass authentication and gain unauthorized access to user accounts via predictable OTP values...

5.9AI score0.00813EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/08/05 12:00 a.m.•15 views

CVE-2025-63822

SirenGPS Android Application 2.19.44 is vulnerable to Incorrect Access Control. An authenticated attacker can manipulate user identifier parameters to bypass authorization controls and gain unauthorized READ and WRITE access to other users' personal information. The API fails to validate that the...

5.9AI score0.00386EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/08/04 11:45 p.m.•64 views

CVE-2026-18853 ZomboDroid Meme Generator App com.zombodroid.MemeGenerator t5.l.c path traversal

A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...

5.3CVSS0.0021EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/08/04 11:45 p.m.•20 views

CVE-2026-18853

A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...

5.3CVSS5.5AI score0.0021EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2026/08/04 11:45 p.m.•64 views

CVE-2026-18853

CVE-2026-18853 affects ZomboDroid Meme Generator App for Android (version 4.6830) through the function t5.l.c of component com.zombodroid.MemeGenerator, enabling path traversal. Local access is required. The exploit has been publicly disclosed, and the vendor has not responded to the disclosure. ...

5.3CVSS5.5AI score0.0021EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/08/04 11:45 p.m.•15 views

CVE-2026-18853 ZomboDroid Meme Generator App com.zombodroid.MemeGenerator t5.l.c path traversal

A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...

5.3CVSS5.5AI score0.0021EPSS
SaveExploits0References5
Rows per page
Query Builder