21 matches found
CVE-2026-107035
A flaw was found in OMN. Insecure permission handling allows an unauthorized attacker to arbitrarily write content into another user's private storage using a crafted payload. This issue could lead to unauthorized data modification and compromise the integrity of sensitive user files...
CVE-2026-107035
Insecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdown versionCode 3400 allows unauthorized attackers to arbitrarily write content into another user's private storage via a crafted payload...
CVE-2026-107040
Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow...
CVE-2026-107035
Insecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdown versionCode 3400 allows unauthorized attackers to arbitrarily write content into another user's private storage via a crafted payload...
Mikhail Basov OMN-Go security vulnerability
Mikhail Basov’s OMN-Go has a security vulnerability stemming from insecure permission settings. This allows unauthorized attackers to invoke exported components, potentially leading to arbitrary data access and control over data flows...
CVE-2026-107035: n/a: Insecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdown versionCode 3400 allows…
Insecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdown versionCode 3400 allows unauthorized attackers to arbitrarily write content into another user's private storage via a crafted payload...
CVE-2026-107035
MBasov OMN Outline notes Markdown (version 3400) is vulnerable to unauthorized data modification due to insecure permissions within the object/Page.java component. An attacker can exploit this flaw by sending a crafted payload to arbitrarily write content into another user's private storage . Whi...
CVE-2026-107035
Insecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdown versionCode 3400 allows unauthorized attackers to arbitrarily write content into another user's private storage via a crafted payload...
CVE-2026-107040: n/a: Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported…
Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow...
PT-2026-132304
Insecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdown versionCode 3400 allows unauthorized attackers to arbitrarily write content into another user's private storage via a crafted payload...
CVE-2026-107040
Mikhail Basov's OMN-Go (versioncode 26080824 ) contains a security vulnerability due to insecure permissions (CWE-926). This flaw allows unauthorized attackers to invoke an exported component, which can result in arbitrary data access and the ability to control data flows . While the vulnerabilit...
PT-2026-132309
Name of the Vulnerable Software and Affected Versions MBasov OMN-Go version 26080824 Description Insecure permissions allow unauthorized attackers to invoke an exported Android component. This can lead to arbitrary access to application data and the ability to control data flow. Recommendations A...
CVE-2026-107040
Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow...
EUVD-2026-113166
Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow...
EUVD-2026-113171
Insecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdown versionCode 3400 allows unauthorized attackers to arbitrarily write content into another user's private storage via a crafted payload...
CVE-2026-107035
Insecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdown versionCode 3400 allows unauthorized attackers to arbitrarily write content into another user's private storage via a crafted payload...
CVE-2026-107040
Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow...
Malicious code in @zalastax/nolb-omn (npm)
The package @zalastax/nolb-omn was found to contain malicious code. --- Credit: OpenSSF source...
