Lucene search
+L

77478 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/29 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-4086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension when displayed in the download dialog...

6.5CVSS6.1AI score0.00278EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/29 12:0 a.m.15 views

PT-2026-5350

Name of the Vulnerable Software and Affected Versions versions prior to 2026-0007 Description A flaw exists in the writeToParcel function within WindowInfo.cpp that could allow an attacker to trick a user into granting permissions through a tapjacking or overlay attack. This could result in local...

8.6CVSS6.1AI score0.0012EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/01/29 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-4090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability existed in Thunderbird for Android where potentially sensitive library locations were logged via Logcat. This vulnerability was fixed in Firefox...

5.3CVSS6.2AI score0.00313EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/01/28 9:31 p.m.15 views

EUVD-2023-25647

Improper authorization in Smart suggestions prior to SMR Apr-2023 Release 1 in Android 13 and 4.1.01.0 in Android 12 allows remote attackers to register a schedule...

5.3CVSS5.9AI score0.00375EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/01/28 4:33 p.m.16 views

Malicious Package

Overview chameleon-sdk-android is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.9AI score
SaveExploits0References2
Malwarebytes
Malwarebytes
added 2026/01/28 12:57 p.m.25 views

WhatsApp rolls out new protections against advanced exploits and spyware

WhatsApp is quietly rolling out a new safety layer for photos, videos, and documents, and it lives entirely under the hood. It won't change how you chat, but it will change what happens to the files that move through your chats—especially the kind that can hide malware. The new feature, called...

5.9AI score
SaveExploits0
HackRead
HackRead
added 2026/01/28 10:44 a.m.10 views

Phantom Malware in Android Game Mods Hijacks Devices for Ad Fraud

Another day, another Android malware strain. This time, Phantom malware aka Android.Phantom is targeting users who install third-party gaming apps from unofficial sources...

5.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/28 3:16 a.m.14 views

CVE-2026-24490

MobSF is a mobile application security testing tool used. Prior to version 4.4.5, a Stored Cross-site Scripting XSS vulnerability in MobSF's Android manifest analysis allows an attacker to execute arbitrary JavaScript in the context of a victim's browser session by uploading a malicious APK. The...

8.1CVSS6.1AI score0.0031EPSS
SaveExploits1References1
Malwarebytes
Malwarebytes
added 2026/01/27 11:55 a.m.95 views

A WhatsApp bug lets malicious media files spread through group chats

WhatsApp is going through a rough patch. Some users would argue it has been ever since Meta acquired the once widely trusted messaging platform. User sentiment has shifted from “trusted default messenger” to a grudgingly necessary Meta product. Privacy-aware users still see WhatsApp as one of the...

5.7AI score
SaveExploits0
NVD
NVD
added 2026/01/27 1:16 a.m.13 views

CVE-2026-24490

MobSF is a mobile application security testing tool used. Prior to version 4.4.5, a Stored Cross-site Scripting XSS vulnerability in MobSF's Android manifest analysis allows an attacker to execute arbitrary JavaScript in the context of a victim's browser session by uploading a malicious APK. The...

8.1CVSS0.0031EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2026/01/27 12:40 a.m.8 views

CVE-2026-24490 MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field

MobSF is a mobile application security testing tool used. Prior to version 4.4.5, a Stored Cross-site Scripting XSS vulnerability in MobSF's Android manifest analysis allows an attacker to execute arbitrary JavaScript in the context of a victim's browser session by uploading a malicious APK. The...

8.1CVSS6.1AI score0.0031EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/01/27 12:40 a.m.43 views

CVE-2026-24490 MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field

MobSF is a mobile application security testing tool used. Prior to version 4.4.5, a Stored Cross-site Scripting XSS vulnerability in MobSF's Android manifest analysis allows an attacker to execute arbitrary JavaScript in the context of a victim's browser session by uploading a malicious APK. The...

8.1CVSS0.0031EPSS
SaveExploits1References3
CVE
CVE
added 2026/01/27 12:40 a.m.32 views

CVE-2026-24490

MobSF (Mobile Security Framework)

8.1CVSS6.1AI score0.0031EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/27 12:40 a.m.5 views

CVE-2026-24490

MobSF is a mobile application security testing tool used. Prior to version 4.4.5, a Stored Cross-site Scripting XSS vulnerability in MobSF's Android manifest analysis allows an attacker to execute arbitrary JavaScript in the context of a victim's browser session by uploading a malicious APK. The...

8.1CVSS6.1AI score0.0031EPSS
SaveExploits1References4Affected Software1
EUVD
EUVD
added 2026/01/27 12:40 a.m.15 views

EUVD-2026-4834

MobSF is a mobile application security testing tool used. Prior to version 4.4.5, a Stored Cross-site Scripting XSS vulnerability in MobSF's Android manifest analysis allows an attacker to execute arbitrary JavaScript in the context of a victim's browser session by uploading a malicious APK. The...

8.1CVSS6.1AI score0.0031EPSS
SaveExploits1References3
OSV
OSV
added 2026/01/27 12:40 a.m.12 views

CVE-2026-24490 MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field

MobSF is a mobile application security testing tool used. Prior to version 4.4.5, a Stored Cross-site Scripting XSS vulnerability in MobSF's Android manifest analysis allows an attacker to execute arbitrary JavaScript in the context of a victim's browser session by uploading a malicious APK. The...

8.1CVSS6.1AI score
SaveExploits0References5
CNNVD
CNNVD
added 2026/01/27 12:0 a.m.11 views

Awesome-Mobile-Security Cross-Site Script Vulnerabilities

Awesome-Mobile-Security is an application software. It strives to provide a collection of useful security-related apps for Android and iOS. Versions of Awesome-Mobile-Security prior to 4.4.5 had a cross-site scripting vulnerability. This vulnerability stemmed from the storage-based cross-site...

8.1CVSS5.8AI score0.0031EPSS
SaveExploits1References3
OSV
OSV
added 2026/01/26 11:36 p.m.10 views

GHSA-8HF7-H89P-3PQJ MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field

Summary A Stored Cross-site Scripting XSS vulnerability in MobSF's Android manifest analysis allows an attacker to execute arbitrary JavaScript in the context of a victim's browser session by uploading a malicious APK. The android:host attribute from elements is rendered in HTML reports without...

8.1CVSS6.1AI score0.0031EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2026/01/26 11:36 p.m.13 views

MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field

Summary A Stored Cross-site Scripting XSS vulnerability in MobSF's Android manifest analysis allows an attacker to execute arbitrary JavaScript in the context of a victim's browser session by uploading a malicious APK. The android:host attribute from elements is rendered in HTML reports without...

8.1CVSS6.1AI score0.0031EPSS
SaveExploits1References5Affected Software1
Snyk
Snyk
added 2026/01/26 11:36 p.m.3 views

Cross-site Scripting (XSS)

Overview mobsf is a Mobile Security Framework MobSF is an automated, all-in-one mobile application Android/iOS/Windows pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. Affected versions of this package are vulnerable to Cross-site...

8.1CVSS6AI score0.0031EPSS
SaveExploits1References2
Rows per page
Query Builder