58 matches found
mobsfscan
mobsfscan mobsfscan ist ein Static-Analysis-Tool, das unsichere Code-Muster in Ihrem Android- und iOS-Quellcode finden kann. Unterstützt Java, Kotlin, Android XML, iOS Info.plist, Swift und Objective C Code. mobsfscan verwendet die Static-Analysis-Regeln von MobSF und basiert auf semgrep und dem...
scrounger
Beschreibung Scrounger – eine Person, die von anderen leiht oder auf deren Kosten lebt. Es gibt keine bessere Beschreibung für dieses Tool aus zwei Hauptgründen: Erstens, weil dieses Tool von vielen anderen bereits veröffentlichten Tools inspiriert ist, und zweitens, weil es von Schwachstellen...
mvt
Mobile Verification Toolkit !IMPORTANT Recentemente fundimos o branch "v3". Isso introduziu mudanças que quebram compatibilidade. Se você dependia da saída do mvt em outros scripts, eles podem ter quebrado. Mais detalhes: https://github.com/mvt-project/mvt/issues/757 O Mobile Verification Toolkit...
Glass
Glass wie in durchsichtig und glatt Ein schneller, nativer, mobile-app first interaktiver Disassembler. Geistiger Nachfolger von IDA Pro für den Android‑/iOS‑Reverse‑Engineering‑Workflow, aufgebaut um: smali für APK / DEX / smali‑Handhabung armv8-encode für AArch64 und ARMv7 A32 / Thumb — native...
CiLocks
/ / / / / / / / / / / / /// / / // / // // / // , //////|//v2.1 CiLocks | Android/IOS-Hacking 📱 Entsperre den Sperrbildschirm, Metasploit und mehr Android/IOS-Hacking Bitte nicht für illegale Aktivitäten verwenden Update verfügbar V2.1 🚀 Neue Tools hinzugefügt Root Android Supersu nicht alle...
Arti Mobile - Tor in Rust for Android and iOS
Arti Mobile: Tor in Rust für Android und iOS Die offizielle Arti Mobile Bibliothek, unterstützt vom Tor Project, bringt die neue Tor-Rust-Laufzeit auf mobile Geräte. Dies ist ein gemeinsames Projekt, um eine standardisierte API für Tor Arti für Android- und iOS-Anwendungen bereitzustellen. Dies...
frida-il2cpp-datacollector
frida-il2cpp-datacollector Portando o monodatacollector do ce para android/ios. A operação foi confirmada com CEVersion 7.4.2 ou posterior. Uso configuração inicial Instale a biblioteca python. pip install pywin32 Corrigindo autorun/monoscript.lua Configuração para o CE reconhecer o Mono como...
CVE-2026-13770: Improper Neutralization of Input During Web Page Generation
The AppMySite – WordPress & WooCommerce Mobile App Builder No-Code Android & iOS App Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via saveamslicensekey AJAX Handler in all versions up to, and including, 3.15.3 due to insufficient input sanitization and output escaping...
Security Bulletin: IBM On Call Manager Mobile Application is affected by a vulnerability in regular expression processing
Summary A vulnerability in the xmldom library affects regular expression processiong for the IBM On Call Manager Android and iOS mobile applications. Vulnerability Details CVEID:CVE-2026-34601 DESCRIPTION: xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and...
mvt v2026.9.7
Mobile Verification Toolkit !IMPORTANT We recently merged the "v3" branch. This introduced breaking changes. If you relied on mvt output in other scripts They might have broken. More details: https://github.com/mvt-project/mvt/issues/757 Mobile Verification Toolkit MVT is a collection of utilitie...
mobsfscan v1.0.0
mobsfscan mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Android XML, iOS Info.plist, Swift and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher...
CVE-2026-7638: Authorization Bypass Through User-Controlled Key
The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to and including 5.6.0. This is due to missing authorization validation in the uploadavatar function, which accepts an attacker-controlled...
Notesnook 代码注入漏洞
Notesnook is an end-to-end encrypted note application developed by Streetwriters. There were code injection vulnerabilities in versions of Notesnook Web/Desktop prior to 3.3.11, as well as in versions for Android/iOS prior to 3.3.17. These vulnerabilities stemmed from a stored-xss vulnerability...
CVE-2026-2375: Improper Privilege Management
The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.5.10. This is due to the verifyrole function in AuthTrails.php explicitly whitelisting the wcfmvendor role alongside subscriber and...
CVE-2025-47147
Cleartext Storage of Sensitive Information CWE-312 in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in Operator's mobile device to extract the session token and exploit access for a limited duration. This issue affects Command Centre Mobile...
CVE-2026-2974
A vulnerability was identified in AliasVault App up to 0.25.3 on Android/iOS. This vulnerability affects unknown code of the file sharedprefs/aliasvault.xml of the component Backup Handler. The manipulation of the argument accessToken/refreshToken/metadata/keyderivationparams/authmethods leads to...
CVE-2025-56400
Cross-Site Request Forgery CSRF vulnerability in the OAuth implementation of the Tuya SDK 6.5.0 for Android and iOS, affects the Tuya Smart and Smartlife mobile applications, as well as other third-party applications that integrate the SDK, allows an attacker to link their own Amazon Alexa accoun...
EUVD-2020-25339
Malware in sbrugna...