97436 matches found
EUVD-2026-77253
The Android application "YAMAP -Social Trekking GPS App" contains an improper access control vulnerability in its WebView implementation. The in-app browser may cause information leakage from the app or redirect users to unintended websites...
CVE-2026-85125
The Android application "YAMAP -Social Trekking GPS App" contains an improper access control vulnerability in its WebView implementation. The in-app browser may cause information leakage from the app or redirect users to unintended websites...
CVE-2026-85125
The Android application "YAMAP -Social Trekking GPS App" contains an improper access control vulnerability in its WebView implementation. The in-app browser may cause information leakage from the app or redirect users to unintended websites...
CVE-2026-85125
YAMAP -Social Trekking GPS App for Android contains an improper access control vulnerability in its WebView (in-app browser) implementation. The flaw may allow information leakage from the app or redirect users to unintended websites . The CVSS 3.0 score is 5.4 (MEDIUM) , requiring user interacti...
"YAMAP -Social Trekking GPS App" vulnerable to improper access control
Overview Android application "YAMAP -Social Trekking GPS App" provided by YAMAP INC. contains the following vulnerability: Improper Verification of Source of a Communication Channel CWE-940 - CVE-2026-85125 Koki Sato of BroadBand Security, Inc. reported this vulnerability to IPA. JPCERT/CC...
AndroidPhantom
👻 ANDROID PHANTOM 🏴☠️ The Next-Gen Android Pentesting Fr...
EUVD-2025-210901
A Cross-Site Scripting XSS vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScript code in the app's context via crafted input in the multiple-choice question text field...
CVE-2025-63842
A Cross-Site Scripting XSS vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScript code in the app's context via crafted input in the multiple-choice question text field...
CVE-2026-77884: Files or Directories Accessible to External Parties
Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network. The server listens on TCP port 8080 and serves files and directory listings from Android external storage...
CVE-2026-59569: Improper Input Validation
An improper input validation vulnerability in Zscaler Client Connector on Android and ChromeOS allows an attacker to potentially bypass Zscaler controls...
CVE-2025-63842: Improper Neutralization of Input During Web Page Generation
A Cross-Site Scripting XSS vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScript code in the app's context via crafted input in the multiple-choice question text field...
PT-2026-91247
Name of the Vulnerable Software and Affected Versions Zscaler Client Connector on Android and ChromeOS affected versions not specified Description An improper input validation issue exists in Zscaler Client Connector on Android and ChromeOS. This flaw allows an attacker to potentially bypass...
PT-2026-91252
Ekia File Manager 1.2.7 exposes com.ekia.filecontrolmanager.OpenFileProvider as an exported Android ContentProvider without requiring caller permissions. The provider maps the caller-controlled URI path directly to a filesystem path and passes it to new File.... It then supports query, openFile,...
Root-My-Device-Payloads
Root My Device Payloads A fork of BuSung-dev/Root-My-Galaxy-...
When Apps Outlive Vendors: Security Implications of IoT Abandonware
As the Internet of Things IoT market continues to expand, many companion apps are being published in app stores, raising security concerns for those whose vendors have abandoned support. Even after vendors discontinue support, such applications frequently remain operational on users' mobile...
CVE-2025-63842
A Cross-Site Scripting XSS vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScript code in the app's context via crafted input in the multiple-choice question text field...
PT-2026-90989
A Cross-Site Scripting XSS vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScript code in the app's context via crafted input in the multiple-choice question text field...
CVE-2025-63842
A Cross-Site Scripting XSS vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScript code in the app's context via crafted input in the multiple-choice question text field...
CVE-2025-63842
CVE-2025-63842 is a Cross-Site Scripting (XSS) vulnerability in the web backend of the Repetico app 1.9.7.31 for Android . A remote authenticated user can execute arbitrary JavaScript in the app's context by supplying crafted input in the multiple-choice question text field . The CVSS 3.1 score i...