5 matches found
CVE-2026-102669
Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat messages...
EUVD-2026-91028
Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat messages...
CVE-2026-102669
The Joyland AI app is vulnerable to a security flaw because it does not verify hostnames . This improper validation of certificates with host mismatches (CWE-297) allows a malicious host to establish a connection or intercept chat messages . No specific exploit information or remediation details ...
EUVD-2026-91025
Joyland AI app allows an attacker with shared network access to inject JavaScript into content loaded in WebView. Without user-granted permissions, an attacker could access the clipboard, make arbitrary HTTP requests via the Weex 'stream' module, or access app-internal storage. If the installed a...
