EUVD-2025-26374

Malicious code in bioql PyPI...

CVE-2025-44017

"Gunosy" App contains a vulnerability where sensitive information may be included in the application's outbound communication. If a user accesses a crafted URL, an attacker may obtain the JWT JSON Web Token...

"Gunosy" App vulnerable to insertion of sensitive information into sent data

Overview "Gunosy" App provided by Gunosy Inc. contains the following vulnerability. Insertion of sensitive information into sent data CWE-201 - CVE-2025-44017 YUNAO ZHOU of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

Gunosy 安全漏洞

Gunosy is a news and information application from the Japanese company Gunosy. Gunosy suffers from a security vulnerability that stems from the disclosure of sensitive information and could lead to the acquisition of a JWT token via a specially crafted URL...

PT-2025-35542

Name of the Vulnerable Software and Affected Versions: Gunosy affected versions not specified Description: The Gunosy App contains an issue where sensitive information may be included in its outbound communication. Accessing a crafted URL could allow an attacker to obtain the JSON Web Token JWT...

CVE-2025-44017: Insertion of Sensitive Information Into Sent Data

"Gunosy" App contains a vulnerability where sensitive information may be included in the application's outbound communication. If a user accesses a crafted URL, an attacker may obtain the JWT JSON Web Token...