97594 matches found
PT-2026-25615
A vulnerability was detected in myAEDES App up to 1.18.4 on Android. Affected is an unknown function of the file aedes/me/beta/utils/EngageBayUtils.java of the component aedes.me.beta. Performing a manipulation of the argument AUTH KEY results in information disclosure. The attack is only possibl...
PT-2026-25760
A weakness has been identified in La Nacion App 10.2.25 on Android. This impacts an unknown function of the file source/app/lanacion/clublanacion/BuildConfig.java of the component app.lanacion.activity. Executing a manipulation of the argument API KEY WEBSOCKET CV can lead to unprotected storage ...
PT-2026-25613
Name of the Vulnerable Software and Affected Versions i-SENS SmartLog App versions up to 2.6.8 Description A weakness exists in the i-SENS SmartLog App on Android, affecting an unknown function within the air.SmartLog.android component. This issue results in the presence of hard-coded credentials...
CVE-2026-4250: Plaintext Storage of a Password
A vulnerability was found in Albert Sağlık Hizmetleri ve Ticaret Albert Health up to 1.7.3 on Android. Affected is an unknown function of the file resources/assets/service-account.json of the component Google Cloud Service Account Key Handler. Performing a manipulation results in unprotected...
CVE-2026-4217: Plaintext Storage of a Password
A security vulnerability has been detected in XREAL Nebula App up to 3.2.1 on Android. This impacts an unknown function of the file in ai/nreal/nebula/flutterPlugin/CloudStoragePlugin.java of the component ai.nreal.nebula.universal. Such manipulation of the argument...
PT-2026-25595
Name of the Vulnerable Software and Affected Versions Samsung Secure Folder versions prior to SMR Mar-2026 Release 1 Description A flaw exists due to the improper export of Android application components within Secure Folder. This allows local attackers to launch arbitrary activity with Secure...
CVE-2026-4219: Use of Hard-coded Credentials
A flaw has been found in INDEX Conferences & Exhibitions Organization YWF BPOF APGCS App up to 1.0.2 on Android. Affected by this vulnerability is an unknown functionality of the file com/index/event/BuildConfig.java of the component ae.index.apgcs. Executing a manipulation of the argument...
PT-2026-25752
A security flaw has been discovered in BabyChakra Pregnancy & Parenting App up to 5.4.3.0 on Android. This affects an unknown function of the file file app/babychakra/babychakra/Configuration.java of the component app.babychakra.babychakra. Performing a manipulation of the argument SEGMENT WRITE...
PT-2026-25614
Name of the Vulnerable Software and Affected Versions XREAL Nebula App versions through 3.2.1 Description A security issue has been identified in XREAL Nebula App on Android. The issue affects an unknown function within the ai/nreal/nebula/flutterPlugin/CloudStoragePlugin.java file of the...
CVE-2026-4216: Use of Hard-coded Credentials
A weakness has been identified in i-SENS SmartLog App up to 2.6.8 on Android. This affects an unknown function of the component air.SmartLog.android. This manipulation causes hard-coded credentials. The attack can only be executed locally. The exploit has been made available to the public and cou...
PT-2026-25771
A vulnerability was determined in CityData CityChat up to 0.12.6 on Android. Affected by this vulnerability is an unknown functionality of the file resources/assets/flutter assets/assets/credentials.json of the component ai.citydata.citychat. Executing a manipulation can lead to unprotected stora...
SAMSUNG Assistant security vulnerabilities
SAMSUNG Assistant is a device assistance component developed by South Korea’s Samsung Corporation. Versions of SAMSUNG Assistant prior to 9.3.10.7 contained security vulnerabilities. These vulnerabilities were caused by improper export of Android application components, which could allow local...
i-SENS SmartLog Trust Management Vulnerability
i-SENS SmartLog is a device data recording and management system developed by i-SENS Corporation. Versions of i-SENS SmartLog 2.6.8 and earlier contained a vulnerability related to trust management. This vulnerability stemmed from hard-coded credentials in the air.SmartLog.android component...
Linux X86 Driver Heap Buffer Overflow DoS
The vulnerability of the chuwihi8init function in the drivers/platform/x86/x86-android-tablets.c driver for X86 devices in the Linux operating system is related to incorrect initialization of the device. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-4243: Plaintext Storage of a Password
A weakness has been identified in La Nacion App 10.2.25 on Android. This impacts an unknown function of the file source/app/lanacion/clublanacion/BuildConfig.java of the component app.lanacion.activity. Executing a manipulation of the argument APIKEYWEBSOCKETCV can lead to unprotected storage of...
CVE-2026-0385
Microsoft Edge Chromium-based for Android Spoofing Vulnerability...
CVE-2026-0385 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
...
CVE-2026-0385
CVE-2026-0385 affects Microsoft Edge (Chromium-based) for Android and is described as a spoofing vulnerability. According to the metrics, it requires network access and user interaction, with a Medium base score (CVSS 3.1: AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) and a vulnerability impact on confide...
