EUVD-2026-75051

The C6 ear camera transmits live video to the EarVision Android application over unencrypted UDP streams. The application manifest permits cleartext traffic, and captured network traffic contains reconstructable JPEG or WEBP video frames transmitted over UDP. An attacker within local wireless ran...

CVE-2026-81330

The Softish C6 Ear Camera transmits live video to the companion EarVision Android application over unencrypted UDP streams . The application manifest explicitly permits cleartext traffic, and the video payload consists of reconstructable JPEG or WEBP frames . An attacker within local wireless ran...

Authorization Bypass Through User-Controlled Key

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the App\Livewire\Importer component, specifically at the imports.index route. An attacker can access sensitive import...

Exploit for CVE-2026-49881

This is a PoC and a writeup for CVE-2026-49881, a logic issue in...

CVE-2026-49313

Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-41987

Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-49313

CVE-2026-49313 is a permission control vulnerability in the app lock module of a Huawei device (CNA: [email protected]). Successful exploitation may affect service confidentiality . The CVSS 3.1 score is 5.5 (Medium) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N , indicating a local attack ...

EUVD-2026-74617

Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-49313

Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-41987

Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-74614

Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-41987

CVE-2026-41987 is a permission control vulnerability in the app management module of a Huawei consumer device, as reported by Huawei's PSIRT (CNA source: [email protected]). Successful exploitation may affect availability , with a CVSS 3.1 base score of 6.2 (MEDIUM) . The attack vector is local , ...

CVE-2026-41987

Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-87597

A flaw was found in Google Chrome's CustomTabs component on Android. A remote attacker, by leveraging a co-installed application, could exploit a user interface UI misrepresentation vulnerability. This could allow the attacker to spoof the address bar, potentially deceiving users about the...

DEBIAN-CVE-2026-87597

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...

CVE-2026-87552

Missing authorization in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: High...

DEBIAN-CVE-2026-87486

Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to spoof address bar via a co-installed app. Chromium security severity: Medium...

EUVD-2026-74459

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...

CVE-2026-87597

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...

CVE-2026-87597

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...