161 matches found
CVE-2025-67230
Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to invoke external protocol handlers without sufficient validation...
CVE-2025-67230
Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to invoke external protocol handlers without sufficient validation...
CVE-2025-67230: Incorrect Default Permissions
Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to invoke external protocol handlers without sufficient validation...
CVE-2025-67230
Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to invoke external protocol handlers without sufficient validation...
CVE-2025-67230
Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to invoke external protocol handlers without sufficient validation...
CVE-2025-67230
ToDesktop Builder version 0.33.0 is vulnerable to a flaw in its Custom URL Scheme handler . Due to insufficient validation, attackers who gain renderer-context access can invoke external protocol handlers, potentially compromising the system. Remediation involves updating to a newer version that ...
CVE-2025-67230
Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to invoke external protocol handlers without sufficient validation...
CVE-2023-40530
Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device...
CVE-2025-67739: Improper Authorization in Handler for Custom URL Scheme
In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure...
EUVD-2020-30639
Malware in sbrugna...
EUVD-2025-26966
Malicious code in bioql PyPI...
EUVD-2024-41372
Malicious code in bioql PyPI...
EUVD-2021-8147
Malicious code in bioql PyPI...
EUVD-2021-8189
Malicious code in bioql PyPI...
EUVD-2021-8282
Malicious code in bioql PyPI...
EUVD-2021-8246
Malicious code in bioql PyPI...
EUVD-2021-8247
Malicious code in bioql PyPI...
CVE-2025-41408
Improper authorization in handler for custom URL scheme issue in "Yahoo! Shopping" App for Android versions prior to 14.15.0 allows a remote unauthenticated attacker may lead a user to access an arbitrary website on the vulnerable App. As a result, the user may become a victim of a phishing attac...
"Yahoo! Shopping" App for Android fails to restrict custom URL schemes properly
Overview "Yahoo! Shopping" App for Android provided by LY Corporation contains the following vulnerability. Improper authorization in handler for custom URL scheme CWE-939 - CVE-2025-41408 Shiga Takuma of BroadBand Security, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the...
CVE-2025-41408: Improper Authorization in Handler for Custom URL Scheme
Improper authorization in handler for custom URL scheme issue in "Yahoo! Shopping" App for Android versions prior to 14.15.0 allows a remote unauthenticated attacker may lead a user to access an arbitrary website on the vulnerable App. As a result, the user may become a victim of a phishing attac...