CVE-2026-107023

A flaw was found in MyBrain. Insecure permissions in the ContentProvider component, which manages application data, allow unauthorized attackers to access sensitive user records. An attacker can exploit this issue to arbitrarily read private notes, tasks, and diary entries, resulting in...

CVE-2026-107023

Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrarily read another user's private notes/tasks/diary content...

CVE-2026-107023: n/a: Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to…

Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrarily read another user's private notes/tasks/diary content...

PT-2026-132177

Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrarily read another user's private notes/tasks/diary content...

CVE-2026-107023

The mhss1 MyBrain application, specifically version v3.1.0 , contains a vulnerability due to insecure permissions within the ContentProvider component. This security flaw allows an unauthorized attacker to arbitrarily read private data, including notes, tasks, and diary content , belonging to ano...

CVE-2026-107023

Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrarily read another user's private notes/tasks/diary content...

EUVD-2026-113180

Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrarily read another user's private notes/tasks/diary content...

CVE-2026-107023

Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to arbitrarily read another user's private notes/tasks/diary content...

EUVD-2025-27521

Malicious code in bioql PyPI...

WordPress MyBrain Utilities plugin cross-site scripting vulnerability

WordPress MyBrain Utilities plugin is a plugin for enhancing the functionality of your website, mainly for optimizing the performance and user experience. A cross-site scripting vulnerability exists in the WordPress MyBrain Utilities plugin that stems from insufficient input cleanup and output...

CVE-2025-10126 MyBrain Utilities <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

The MyBrain Utilities plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugins's 'mbumap' shortcode in all versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-10126

CVE-2025-10126 affects the WordPress MyBrain Utilities plugin (mbumap shortcode) up to version 1.0.8. Root cause: insufficient input sanitization and output escaping on user-supplied shortcode attributes, enabling Stored Cross-Site Scripting. Impact: authenticated attackers withContributor+ privi...

WordPress plugin MyBrain Utilities has a cross-site scripting vulnerability

WordPress MyBrain Utilities plugin is a plugin for enhancing the functionality of your website, mainly for optimizing the performance and user experience. A cross-site scripting vulnerability exists in the WordPress MyBrain Utilities plugin that stems from insufficient input cleanup and output...

CVE-2025-10126: Improper Neutralization of Input During Web Page Generation

The MyBrain Utilities plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugins's 'mbumap' shortcode in all versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

PT-2025-37008

Name of the Vulnerable Software and Affected Versions: MyBrain Utilities plugin for WordPress versions up to and including 1.0.8 Description: The MyBrain Utilities plugin for WordPress is susceptible to Stored Cross-Site Scripting through the mbumap shortcode due to inadequate input sanitization...

WordPress MyBrain Utilities plugin <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Gilang in WordPress Plugin MyBrain Utilities versions = 1.0.8...