Lucene search
+L

20682 matches found

RedhatCVE
RedhatCVE
added 2025/11/18 5:56 a.m.18 views

CVE-2025-60022

Improper certificate validation vulnerability exists in 'デジラアプリ' App for iOS prior to ver.80.10.00. If this vulnerability is exploited, a man-in-the-middle attack may allow an attacker to eavesdrop on and/or tamper with an encrypted communication...

4.8CVSS5AI score0.00133EPSS
SaveExploits0References1
OSV
OSV
added 2025/11/17 11:47 p.m.15 views

BIT-MOODLE-2025-62399 Moodle: password brute force risk when mobile/web services enabled

Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks...

7.5CVSS7.1AI score0.0038EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/11/17 9:31 p.m.11 views

EUVD-2025-197856

reebox v5 HD firmware = 1.7.20, Freebox v5 Crystal firmware = 1.7.20, Freebox v6 Révolution r1–r3 firmware = 4.7.x, Freebox Mini 4K firmware = 4.7.x, and Freebox One firmware = 4.7.x were discovered to expose subscribers' IMSI identifiers in plaintext during the initial phase of EAP-SIM...

6.8AI score0.00107EPSS
SaveExploits1References3
NVD
NVD
added 2025/11/17 7:16 p.m.12 views

CVE-2024-44654

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...

6.5CVSS0.0024EPSS
SaveExploits1References2
Malwarebytes
Malwarebytes
added 2025/11/17 8:02 a.m.13 views

A week in security (November 10 – November 16)

Last week on Malwarebytes Labs: Be careful responding to unexpected job interviews Your passport, now on your iPhone. Helpful or risky? 1 million victims, 17,500 fake sites: Google takes on toll-fee scammers Are you paying more than other people? NY cracks down on surveillance pricing We opened a...

6.5AI score
SaveExploits0
NVD
NVD
added 2025/11/17 6:15 a.m.14 views

CVE-2025-60022

Improper certificate validation vulnerability exists in 'デジラアプリ' App for iOS prior to ver.80.10.00. If this vulnerability is exploited, a man-in-the-middle attack may allow an attacker to eavesdrop on and/or tamper with an encrypted communication...

4.8CVSS0.00133EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/17 5:51 a.m.27 views

CVE-2025-60022

The CVE-2025-60022 issue affects the iOS app デジラアプリ (versions prior to 80.10.00). Root cause: improper server certificate validation, enabling a MITM, which could allow eavesdropping or tampering of encrypted communications. Affected platforms: iOS, with impact on confidentiality/integrity as des...

4.8CVSS6.3AI score0.00133EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/11/17 12:00 a.m.13 views

EUVD-2024-55095

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...

6.5CVSS7.5AI score0.0024EPSS
SaveExploits1References3
Packet Storm News
Packet Storm News
added 2025/11/17 12:00 a.m.14 views

DualTAP: A Dual-Task Adversarial Protector for Mobile MLLM Agents

The reliance of mobile GUI agents on Multimodal Large Language Models MLLMs introduces a severe privacy vulnerability: screenshots containing Personally Identifiable Information PII are often sent to untrusted, third-party routers. These routers can exploit their own MLLMs to mine this data,...

6.8AI score
SaveExploits0
Cvelist
Cvelist
added 2025/11/17 12:00 a.m.23 views

CVE-2024-44654

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...

0.0024EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/11/15 3:50 a.m.12 views

CVE-2024-9126

Use after free in Internals in Google Chrome on iOS prior to 127.0.6533.88 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a series of curated UI gestures. Chromium security severity: Medium...

7.5CVSS7.2AI score0.00222EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/11/14 6:02 p.m.25 views

CVE-2025-59480

Mattermost Mobile Apps versions =2.32.0 fail to verify that SSO redirect tokens originate from the trusted server, which allows a malicious Mattermost instance or on-path attacker to obtain user session credentials via crafted token-in-URL responses...

6.1CVSS6.8AI score0.00144EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/14 3:15 a.m.16 views

CVE-2024-13983

Inappropriate implementation in Lens in Google Chrome on iOS prior to 136.0.7103.59 allowed a remote attacker to perform UI spoofing via a crafted QR code. Chromium security severity: Low...

6.3CVSS0.0014EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/11/14 2:29 a.m.1 views

CVE-2024-13983

Inappropriate implementation in Lens in Google Chrome on iOS prior to 136.0.7103.59 allowed a remote attacker to perform UI spoofing via a crafted QR code. Chromium security severity: Low...

6AI score0.0014EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/11/14 12:00 a.m.17 views

EUVD-2024-55078

Multiple parameters in register.php in PHPGurukul Student Record System 3.20 are vulnerable to SQL injection. These include: c-full, fname, mname,lname, gname, ocp, nation, mobno, email, board1, roll1, pyear1, board2, roll2, pyear2, sub1,marks1, sub2, course-short, income, category, ph, country,...

6.5CVSS7.1AI score0.0024EPSS
SaveExploits1References3
NVD
NVD
added 2025/11/13 6:15 p.m.12 views

CVE-2025-59480

Mattermost Mobile Apps versions =2.32.0 fail to verify that SSO redirect tokens originate from the trusted server, which allows a malicious Mattermost instance or on-path attacker to obtain user session credentials via crafted token-in-URL responses...

6.5CVSS0.00144EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/11/13 5:32 p.m.23 views

CVE-2025-59480 Inadequate validation of SSO redirect credentials permits credential theft

Mattermost Mobile Apps versions =2.32.0 fail to verify that SSO redirect tokens originate from the trusted server, which allows a malicious Mattermost instance or on-path attacker to obtain user session credentials via crafted token-in-URL responses...

6.1CVSS0.00144EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/11/13 5:32 p.m.6 views

CVE-2025-59480 Inadequate validation of SSO redirect credentials permits credential theft

Mattermost Mobile Apps versions =2.32.0 fail to verify that SSO redirect tokens originate from the trusted server, which allows a malicious Mattermost instance or on-path attacker to obtain user session credentials via crafted token-in-URL responses...

6.1CVSS6.4AI score0.00144EPSS
SaveExploits0References1
OSV
OSV
added 2025/11/13 5:32 p.m.10 views

CVE-2025-59480 Inadequate validation of SSO redirect credentials permits credential theft

Mattermost Mobile Apps versions =2.32.0 fail to verify that SSO redirect tokens originate from the trusted server, which allows a malicious Mattermost instance or on-path attacker to obtain user session credentials via crafted token-in-URL responses...

6.1CVSS6.4AI score
SaveExploits0References3
CVE
CVE
added 2025/11/13 5:32 p.m.32 views

CVE-2025-59480

Mattermost Mobile Apps (Android/iOS) versions up to and including 2.32.0 are affected by an insufficient verification of SSO redirect tokens. The root cause is failure to verify that SSO tokens originate from a trusted server, enabling a malicious Mattermost instance or an on-path attacker to obt...

6.5CVSS6.4AI score0.00144EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder