Lucene search
+L

89660 matches found

NVD
NVD
•added 2025/10/12 9:15 p.m.•11 views

CVE-2025-11645

A security vulnerability has been detected in Tomofun Furbo Mobile App up to 7.57.0a on Android. This affects an unknown part of the component Authentication Token Handler. The manipulation leads to insecure storage of sensitive information. It is possible to launch the attack on the physical...

2.4CVSS0.00196EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/12 8:32 p.m.•8 views

EUVD-2025-33908

A security vulnerability has been detected in Tomofun Furbo Mobile App up to 7.57.0a on Android. This affects an unknown part of the component Authentication Token Handler. The manipulation leads to insecure storage of sensitive information. It is possible to launch the attack on the physical...

2.4CVSS5.5AI score0.00196EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/10/12 8:32 p.m.•3 views

CVE-2025-11645 Tomofun Furbo Mobile App Authentication Token sensitive information

A security vulnerability has been detected in Tomofun Furbo Mobile App up to 7.57.0a on Android. This affects an unknown part of the component Authentication Token Handler. The manipulation leads to insecure storage of sensitive information. It is possible to launch the attack on the physical...

2.4CVSS5.7AI score0.00196EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/10/12 8:32 p.m.•49 views

CVE-2025-11645 Tomofun Furbo Mobile App Authentication Token sensitive information

A security vulnerability has been detected in Tomofun Furbo Mobile App up to 7.57.0a on Android. This affects an unknown part of the component Authentication Token Handler. The manipulation leads to insecure storage of sensitive information. It is possible to launch the attack on the physical...

2.4CVSS0.00196EPSS
SaveExploits0References4
CVE
CVE
•added 2025/10/12 8:32 p.m.•41 views

CVE-2025-11645

CVE-2025-11645 (Tomofun Furbo Mobile App) affects Android versions up to 7.57.0a, arising from insecure storage in the Authentication Token Handler. The issue may allow information disclosure on a physical device; the exploit has been publicly disclosed. Multiple connected sources (including PT-2...

2.4CVSS3.7AI score0.00196EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/12 12:00 a.m.•0 views

CVE-2025-11645: Insecure Storage of Sensitive Information

A security vulnerability has been detected in Tomofun Furbo Mobile App up to 7.57.0a on Android. This affects an unknown part of the component Authentication Token Handler. The manipulation leads to insecure storage of sensitive information. It is possible to launch the attack on the physical...

2.4CVSS5.1AI score0.00196EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/12 12:00 a.m.•14 views

PT-2025-41733

Name of the Vulnerable Software and Affected Versions Tomofun Furbo Mobile App versions through 7.57.0a Description A security issue has been identified in the Authentication Token Handler component of the Tomofun Furbo Mobile App on Android. The vulnerability involves insecure storage of sensiti...

2.4CVSS3.6AI score0.00196EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
•added 2025/10/11 7:23 a.m.•16 views

CVE-2025-21058

Improper access control in Routines prior to version 4.8.7.1 in Android 15 and 4.9.6.0 in Android 16 allows local attackers to potentially execute arbitrary code with SystemUI privilege...

7.3CVSS7.4AI score0.00139EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/11 7:23 a.m.•14 views

CVE-2025-21063

Improper access control in Samsung Voice Recorder prior to version 21.5.73.12 in Android 15 and 21.5.81.40 in Android 16 allows physical attackers to access recording files on the lock screen...

4.6CVSS6.4AI score0.00174EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2025/10/10 2:25 p.m.•10 views

Stealit Malware Abuses Node.js Single Executable Feature via Game and VPN Installers

Cybersecurity researchers have disclosed details of an active malware campaign called Stealit that has leveraged Node.js' Single Executable Application SEA feature as a way to distribute its payloads. According to Fortinet FortiGuard Labs, select iterations have also employed the open-source...

7.3AI score
SaveExploits0
OSV
OSV
•added 2025/10/10 7:15 a.m.•15 views

CVE-2025-21063

Improper access control in Samsung Voice Recorder prior to version 21.5.73.12 in Android 15 and 21.5.81.40 in Android 16 allows physical attackers to access recording files on the lock screen...

4.6CVSS5.8AI score0.00174EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/10 7:15 a.m.•10 views

CVE-2025-21063

Improper access control in Samsung Voice Recorder prior to version 21.5.73.12 in Android 15 and 21.5.81.40 in Android 16 allows physical attackers to access recording files on the lock screen...

4.6CVSS0.00174EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/10 7:15 a.m.•19 views

CVE-2025-21058

Improper access control in Routines prior to version 4.8.7.1 in Android 15 and 4.9.6.0 in Android 16 allows local attackers to potentially execute arbitrary code with SystemUI privilege...

7.3CVSS0.00139EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/10 6:33 a.m.•19 views

CVE-2025-21063

Improper access control in Samsung Voice Recorder prior to version 21.5.73.12 in Android 15 and 21.5.81.40 in Android 16 allows physical attackers to access recording files on the lock screen...

4.6CVSS0.00174EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/10 6:33 a.m.•18 views

EUVD-2025-33670

Improper access control in Samsung Voice Recorder prior to version 21.5.73.12 in Android 15 and 21.5.81.40 in Android 16 allows physical attackers to access recording files on the lock screen...

4.6CVSS5.8AI score0.00174EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/10 6:33 a.m.•27 views

CVE-2025-21058

CVE-2025-21058 affects SAMSUNG Mobile Routines, with improper access control in Routines versions prior to 4.8.7.1 (Android 15) and 4.9.6.0 (Android 16). This allows local attackers to potentially execute arbitrary code with SystemUI privileges . The issue is confirmed across multiple sources (RH...

7.3CVSS7AI score0.00139EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/10 6:33 a.m.•8 views

CVE-2025-21058

Improper access control in Routines prior to version 4.8.7.1 in Android 15 and 4.9.6.0 in Android 16 allows local attackers to potentially execute arbitrary code with SystemUI privilege...

7.3CVSS7AI score0.00139EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/10 6:33 a.m.•18 views

EUVD-2025-33675

Improper access control in Routines prior to version 4.8.7.1 in Android 15 and 4.9.6.0 in Android 16 allows local attackers to potentially execute arbitrary code with SystemUI privilege...

7.3CVSS6.8AI score0.00139EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/10 6:33 a.m.•26 views

CVE-2025-21058

Improper access control in Routines prior to version 4.8.7.1 in Android 15 and 4.9.6.0 in Android 16 allows local attackers to potentially execute arbitrary code with SystemUI privilege...

7.3CVSS0.00139EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/10/10 6:28 a.m.•312 views

Exploit for Injection in Google Android

EXPLOITER: Automated Exploit for CVE-2024-0044 EXPLOITER...

7.8CVSS6.9AI score0.0146EPSS
SaveExploits17
Rows per page
Query Builder