306 matches found
CVE-2019-15611
Violation of Secure Design Principles in the iOS App 2.23.0 causes the app to leak its login and token to other Nextcloud services when search e.g. for federated users or registering for push notifications...
CVE-2019-5927
Directory traversal vulnerability in 'an' App for iOS Version 3.2.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors...
CVE-2014-100012
SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary SQL commands via the i parameter...
CVE-2019-16908
An issue was discovered in the Infosysta "In-App & Desktop Notifications" app before 1.6.14J8 for Jira. It is possible to obtain a list of all Jira projects without authentication/authorization via the plugins/servlet/nfj/ProjectFilter?searchQuery= URI...
CVE-2019-15615
A wrong check for the system time in the Android App 3.9.0 causes a bypass of the lock protection when changing the time of the system to the past...
CVE-2019-15336
The Lava Z61 Turbo Android device with a build fingerprint of LAVA/Z61Turbo/Z61Turbo:8.1.0/O11019/1536917928:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app versionCode=400, versionName=v4.0.31 that allows any app co-located on the device to...
CVE-2025-32400
creationtimestamp| type| source ---|---|--- 2025-05-07 07:22:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15275 2025-05-07 08:26:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lokxykw52r2h 2025-05-07 09:32:04+00:00| published-proof-of-concept|...
CVE-2025-37748
creationtimestamp| type| source ---|---|--- 2025-05-01 13:14:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14272 2025-05-01 13:55:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo4hlqvwxn2h 2025-05-01 16:30:18+00:00| seen|...
CVE-2025-32884
An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. By default, a GID is the user's phone number unless they specifically opt out. A phone number is very sensitive information because it can be tied back to individuals. The app does not encrypt the GID in messages...
CVE-2025-32888
An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. The verification token used for sending SMS through a goTenna server is hardcoded in the app...
CVE-2025-4125
creationtimestamp| type| source ---|---|--- 2025-04-30 10:00:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnzjxxfrut2r 2025-04-30 12:03:33+00:00| seen| https://t.me/cvedetector/24074 2025-04-30 13:13:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14022...
CVE-2025-3983
creationtimestamp| type| source ---|---|--- 2025-04-27 20:09:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13635 2025-04-27 21:40:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnt7owz5e52b 2025-04-27 23:00:33+00:00| seen|...
CVE-2025-20236
A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary files, which could allow the attacker to execute arbitrary commands on the host of the targeted user. This vulnerability is due to insufficient inpu...
CVE-2025-3300
creationtimestamp| type| source ---|---|--- 2025-04-24 09:12:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13201 2025-04-24 13:03:42+00:00| seen| https://t.me/cvedetector/23658 2025-04-24 14:19:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnkvntgnrw2d 2026-04-08...
CVE-2025-32790 Dify Allows Insecure User Role Access Control for APP DSL Exporting
Dify is an open-source LLM app development platform. In versions 0.6.8 and prior, a vulnerability was identified in the DIFY AI where normal users are improperly granted permissions to export APP DSL. The feature in '/export' should only allow administrator users to export DSL. A workaround for...
CVE-2025-20236 Cisco Webex App Client-Side Remote Code Execution Vulnerability
A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary files, which could allow the attacker to execute arbitrary commands on the host of the targeted user. This vulnerability is due to insufficient inpu...
CVE-2025-30649
creationtimestamp| type| source ---|---|--- 2025-04-09 23:28:09+00:00| seen| https://t.me/cvedetector/22595 2025-04-09 23:38:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmg5v7e2772f...
CVE-2025-3242
creationtimestamp| type| source ---|---|--- 2025-04-04 11:39:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10431 2025-04-04 13:07:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyiciqnha26 2025-04-04 14:40:16+00:00| seen|...
CVE-2025-22925
creationtimestamp| type| source ---|---|--- 2025-04-02 23:01:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lluikuclpm2y 2025-04-03 01:01:36+00:00| seen| https://t.me/cvedetector/21926...