23 matches found
CVE-2026-109568 Shaark 1.2.13 through 1.2.44 Missing Authorization via API Update and Delete Routes
Shaark 1.2.13 through 1.2.44 contains a missing authorization vulnerability in the Link, Story, Chest and Album API controllers that skips ownership checks. Authenticated non-admin users can send PUT or DELETE requests to /api/link,story,chest,album/id with numeric IDs to overwrite or delete othe...
CVE-2026-109568
The Shaark application, versions 1.2.13 through 1.2.44 , is vulnerable to a missing authorization flaw within the Link, Story, Chest, and Album API controllers. The root cause is a failure to perform ownership checks on these specific endpoints. Consequently, authenticated non-admin users can sub...
EUVD-2026-34041
Out of bounds write and reads in openSeaChest’s --showSCSIDefects in Seagate’s openSeaChest v25.05.3 on all supported platforms allows for writing defect information out of bounds for very large defects lists via a very bad drive with lots of defects or a maliciously crafted SCSI device’s defect...
CVE-2026-10719 Open Seachest/Seachest NVMe show Format Descriptors Vulnerability
Out of bounds write in openSeaChest’s --showSupportedFormats in Seagate’s openSeaChest v25.05.3 on all supported platforms allows for writing 1 extra byte outside of allocated memory which sets a value to 1 via a maliciously crafted NVMe device with a bogus value in the namespace FLBAS byte...
CVE-2026-10718 Open Seachest/Seachest NVMe Trim (Deallocate) Vulnerability
Out of bounds write in openSeaChest’s Trim/Unmap operation in Seagate’s openSeaChest v26.03.0 on all supported platforms allows for writing extra memory describing a range of LBAs to deallocate 16 bytes outside of the allocated space when running this operation...
CVE-2025-62784
InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions before 1.6.5 contain a vulnerability where any plugin using a GUI with the GuiStorageElement and allows taking out items out of that element can allow item duplication when the experimental Bundle item feature i...
Malicious code in @malware-test-chest-kotow-fogey-carte/test-mlw3-chest-kotow-fogey-carte (npm)
The package @malware-test-chest-kotow-fogey-carte/test-mlw3-chest-kotow-fogey-carte was found to contain malicious code...
MAL-2025-8549 Malicious code in @malware-test-chest-kotow-fogey-carte/test-mlw3-chest-kotow-fogey-carte (npm)
The package @malware-test-chest-kotow-fogey-carte/test-mlw3-chest-kotow-fogey-carte was found to contain malicious code...
MAL-2025-8821 Malicious code in @malware-test-ocean-onned-sikes-chest/test-mlw3-ocean-onned-sikes-chest (npm)
The package @malware-test-ocean-onned-sikes-chest/test-mlw3-ocean-onned-sikes-chest was found to contain malicious code...
PT-2023-12493 · Mojang · Minecraft
Name of the Vulnerable Software and Affected Versions: Stargate-Bukkit versions prior to 0.11.5.1 Description: The issue affects the Stargate-Bukkit mod for the Minecraft video game, which adds a portal-focused environment. In affected versions, minecarts with chests will drop their items when...
Chest Simulator for CR - GPL license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Chest Simulator for CR published at the 'play' market has multiple vulnerabilities...
Chest Workout - LumoWell - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Chest Workout - LumoWell published at the 'play' market has multiple vulnerabilities...
30 Day Chest Challenge FREE - MIT license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application 30 Day Chest Challenge FREE published at the 'play' market has multiple vulnerabilities...
Ladies' Chest Workout FREE - Customized SSL, Exported components, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Ladies' Chest Workout FREE published at the 'play' market has multiple vulnerabilities...
Chest Workout - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Chest Workout published at the 'play' market has multiple vulnerabilities...
CVE-2014-5796
The Chest Workout aka net.p4p.chest application 2.0.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The Chest Workout aka net.p4p.chest application 2.0.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5796
CVE-2014-5796 affects the Android app “The Chest Workout” (net.p4p.chest) version 2.0.8. The vulnerability is that the app does not verify X.509 certificates for SSL/TLS servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Acco...
CVE-2014-5796
The Chest Workout aka net.p4p.chest application 2.0.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5796: Undefined Security Weakness
The Chest Workout aka net.p4p.chest application 2.0.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...