CVE-2023-45321

The Android Client application, when enrolled with the define method 1 the user manually inserts the server ip address, use HTTP protocol to retrieve sensitive information ip address and credentials to connect to a remote MQTT broker entity instead of HTTPS and this feature is not configurable by...

CVE-2021-31881

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303. When processing a DHCP OFFER message, the DHCP client application does not validate the length of the Vendor options, leading to Denial-of-Service...

EUVD-2025-201305

The password reset mechanism for the Pivot client application is weak, and it may allow an attacker to take over the account...

PT-2025-49157

Name of the Vulnerable Software and Affected Versions Pivot client application affected versions not specified Description The password reset mechanism is weak and could allow an attacker to take over an account. Recommendations At the moment, there is no information about a newer version that...

CVE-2025-10699

A vulnerability was reported in the Lenovo LeCloud client application that, under certain conditions, could allow information disclosure...

EUVD-2020-6384

Malware in sbrugna...

EUVD-2018-12592

Malware in sbrugna...

EUVD-2017-10251

Malware in sbrugna...

EUVD-2019-6677

Malware in sbrugna...

EUVD-2014-3511

Malicious code in bioql PyPI...

EUVD-2023-49024

Malicious code in bioql PyPI...

EUVD-2022-35608

Malicious code in bioql PyPI...

EUVD-2023-50363

Malicious code in bioql PyPI...

Malicious code in raas-client-app (npm)

--- -= Per source details. Do not edit below this line.=-...

PT-2025-29961 · Filez · Filez

Name of the Vulnerable Software and Affected Versions: FileZ client application affected versions not specified Description: An authentication bypass exists in the FileZ client application. A local attacker with elevated permissions may gain access to application data. Recommendations: At the...

CVE-2025-5192

A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to bypass authentication and access application functions...

CVE-2025-5192: Missing Authentication for Critical Function

A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to bypass authentication and access application functions...

CVE-2024-32482

The Tillitis TKey signer device application is an ed25519 signing tool. A vulnerability has been found that makes it possible to disclose portions of the TKey’s data in RAM over the USB interface. To exploit the vulnerability an attacker needs to use a custom client application and to touch the...

CVE-2023-44689

e-Gov Client Application Windows version versions prior to 2.1.1.0 and e-Gov Client Application macOS version versions prior to 1.1.1.0 are vulnerable to improper authorization in handler for custom URL scheme. A crafted URL may direct the product to access an arbitrary website. As a result, the...

CVE-2023-45220

The Android Client application, when enrolled with the define method 1the user manually inserts the server ip address, use HTTP protocol to retrieve sensitive information ip address and credentials to connect to a remote MQTT broker entity instead of HTTPS and this feature is not configurable by...