31752 matches found
CVE-2025-56146
Indian Bank IndSMART Android App 3.8.1 is vulnerable to Missing SSL Certificate Validation in NuWebViewActivity...
10 Evaluation Points for Your App Platform on Kubernetes
...
CVE-2025-9965 UDP Service Weak Authentication
Improper authentication vulnerability in Novakon P series allows unauthenticated attackers to upload and download any application from/to the device.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 commit d0f97fd9...
CVE-2025-9342
CVE-2025-9342 affects Anadolu Hayat Emeklilik AHE Mobile (versions 1.9.7–1.9.8). A user-controlled key allows an authorization bypass, enabling privilege abuse. Public descriptions across multiple feeds confirm the issue and list 1.9.9 as the required fix. Impact details state privilege elevation...
CVE-2025-9342 IDOR in Anadolu Hayat Emeklilik's AHE Mobile
Authorization Bypass Through User-Controlled Key vulnerability in Anadolu Hayat Emeklilik Inc. AHE Mobile allows Privilege Abuse. This issue affects AHE Mobile: from 1.9.7 before 1.9.9...
CVE-2025-56146
Indian Bank IndSMART Android App 3.8.1 is vulnerable to Missing SSL Certificate Validation in NuWebViewActivity...
PT-2025-39203
Name of the Vulnerable Software and Affected Versions Indian Bank IndSMART Android App version 3.8.1 Description The Indian Bank IndSMART Android App version 3.8.1 exhibits a flaw related to missing SSL certificate validation within the NuWebViewActivity component. This could potentially allow fo...
Indian Bank IndSMART Android App 安全漏洞
Indian Bank IndSMART Android App is a banking mobile application from Indian Bank, India. A security vulnerability exists in Indian Bank IndSMART Android App version 3.8.1, which stems from a lack of SSL certificate validation in NuWebViewActivity...
CVE-2025-56146
CVE-2025-56146 affects Indian Bank IndSMART Android App v3.8.1, with a missing SSL certificate validation flaw in the NuWebViewActivity. Affected software is the Indian Bank IndSMART Android App; the underlying cause is lack of SSL certificate validation in NuWebViewActivity, enabling potential m...
PT-2025-39226
Name of the Vulnerable Software and Affected Versions Click Plus C2-03CPU2 version 3.60 Description An authorization bypass exists in the Click Plus C2-03CPU2 device firmware. An authenticated user with low-level access can exploit this issue through the KOPR protocol, used by the Remote PLC...
CVE-2025-10771
creationtimestamp| type| source ---|---|--- 2025-09-22 04:23:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lzfkqtmfys2u...
CVE-2025-10767
creationtimestamp| type| source ---|---|--- 2025-09-22 04:13:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lzfk6wm7w32j...
CVE-2025-10777
creationtimestamp| type| source ---|---|--- 2025-09-22 02:42:26+00:00| seen| https://bsky.app/profile/potato.software/post/3lzff4kzmcr2y 2025-09-22 11:46:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lzgdjrsqup2c...
CVE-2025-10722
A vulnerability was detected in SKTLab Mukbee App 1.01.196 on Android. This affects an unknown function of the file AndroidManifest.xml of the component com.dw.android.mukbee. The manipulation results in improper export of android application components. The attack must be initiated from a local...
CVE-2025-10721
A vulnerability was determined in Webull Investing & Trading App 11.2.5.63 on Android. This vulnerability affects unknown code of the file AndroidManifest.xml. This manipulation causes improper export of android application components. The attack can only be executed locally. The exploit has been...
CVE-2025-10718
A vulnerability was found in Ooma Office Business Phone App up to 7.2.2 on Android. This affects an unknown part of the component com.ooma.office2. The manipulation results in improper export of android application components. The attack needs to be approached locally. The exploit has been made...
CVE-2025-10716
A flaw has been found in Creality Cloud App up to 6.1.0 on Android. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.cxsw.sdprinter. Executing manipulation can lead to improper export of android application components. It is possible ...
CVE-2025-10715
A security flaw has been discovered in APEUni PTE Exam Practice App up to 10.8.0 on Android. The impacted element is an unknown function of the file AndroidManifest.xml of the component com.apeedication. The manipulation results in improper export of android application components. The attack...
CVE-2025-59421
Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service SaaS. A bad actor can flood the inbox of a user by repeatedly sending invites duplicate. The issue is fixed in commit 83c3fc7676c5dbbe1fd5092d21d95a10c7b48615...