EUVD-2022-41334

Malicious code in bioql PyPI...

EUVD-2022-41332

Malicious code in bioql PyPI...

EUVD-2025-7532

Malicious code in bioql PyPI...

EUVD-2025-11349

Malicious code in bioql PyPI...

Anadolu Hayat Emeklilik AHE Mobile 安全漏洞

Anadolu Hayat Emeklilik AHE Mobile is a pension plan mobile application from Anadolu Hayat Emeklilik, Turkey. A security vulnerability exists in Anadolu Hayat Emeklilik AHE Mobile version 1.9.7 up to and including version 1.9.9, which stems from a user-controllable key leading to an authorization...

WTW-EAGLE App 信任管理问题漏洞

WTW-EAGLE App is a mobile application from WTW that has the ability to provide risk management, insurance data access and analytics. A trust management issue vulnerability exists in the WTW-EAGLE App that stems from not properly validating server certificates, which could lead to a...

Seismic App 安全漏洞

Seismic App is a mobile application for a sales empowerment platform from Seismic USA. A security vulnerability exists in Seismic App version 2.4.2, which stems from an improper export of the file AndroidManifest.xml component and could lead to a local attack...

LinkedIn Mobile Application 安全漏洞

LinkedIn Mobile Application is a mobile application from LinkedIn Corporation USA. A security vulnerability exists in LinkedIn Mobile Application version 4.1.1087.2, which stems from a failed link preview metadata update and could lead to a phishing attack...

CVE-2025-50503

A vulnerability in the password reset workflow of the Touch Lebanon Mobile App 2.20.2 allows an attacker to bypass the OTP reset password mechanism. By manipulating the reset process, an unauthorized user may be able to reset the password and gain access to the account without needing to provide ...

CVE-2025-8393

A TLS vulnerability exists in the phone application used to manage a connected device. The phone application accepts self-signed certificates when establishing TLS communication which may result in man-in-the-middle attacks on untrusted networks. Captured communications may include user credentia...

The vulnerability of the Mobile Security Framework (MobSF), which stems from the lack of protective measures for website structures, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Mobile Security Framework for mobile application security research relates to the lack of protective measures for website structures. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

CVE-2025-29629

Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 uses weak default credentials for secure shell access. This may result in attackers gaining access to exposed Gardyn Home Kits...

CVE-2025-36062

CVE-2025-36062 affects IBM Cognos Analytics Mobile (iOS) 1.1.0–1.1.22, with information exposure possible due to unencrypted network traffic. The NVD entry reports a high impact (C開 C:H, I:N, A:N) and CVSS v3.1 base score up to 7.5, while IBM’s bulletin lists additional related vulnerabilities an...

CVE-2025-7703

Authentication vulnerability in the mobile application（tech.palm.id）may lead to the risk of information leakage...

CVE-2025-7703

Authentication vulnerability in the mobile application（tech.palm.id）may lead to the risk of information leakage...

CVE-2025-7703

Technical details for CVE-2025-7703 are not publicly disclosed in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2025-7703

Authentication vulnerability in the mobile application（tech.palm.id）may lead to the risk of information leakage...

CVE-2025-7703

Authentication vulnerability in the mobile application（tech.palm.id）may lead to the risk of information leakage...

PT-2025-29712 · Unknown · Tech.Palm.Id

Name of the Vulnerable Software and Affected Versions: tech.palm.id affected versions not specified Description: An authentication issue exists in the mobile application that may result in information disclosure. Recommendations: At the moment, there is no information about a newer version that...

MAL-2025-6214 Malicious code in ecinc-cloud-moaxmpp (npm)

Package exhibits multiple malicious behaviors: Office doc access/encryption, DB interaction, local storage clearing, arbitrary code execution, /dev/shm ref. The code includes a native bridge that allows it to execute arbitrary SQL queries on a mobile device’s database when used within a specific...