CVE-2025-32888

An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. The verification token used for sending SMS through a goTenna server is hardcoded in the app...

CVE-2025-32890

An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. It uses a custom implementation of encryption without any additional integrity checking mechanisms. This leaves messages malleable to an attacker that can access the message...

CVE-2025-32881

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. By default, the GID is the user's phone number unless they specifically opt out. A phone number is very sensitive information because it can be tied back to individuals. The app does not encrypt the GID in messages...

CVE-2025-32888

GoTenna Mesh CVE-2025-32888 affects devices running app 5.5.3 with firmware 1.1.12, where the verification token used for sending SMS through a goTenna server is hardcoded in the app. Reported impact indicators show high severity (CVSS v3.1: base score 8.8) with confidentiality, integrity, and av...

CVE-2025-32889

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The verification token used for sending SMS through a goTenna server is hardcoded in the app...

PT-2025-18689 · Gotenna · Gotenna

Name of the Vulnerable Software and Affected Versions: goTenna v1 devices with app version 5.5.3 and firmware version 0.25.5 Description: An issue was discovered where the verification token used for sending SMS through a goTenna server is hardcoded in the app. This affects the ability to securel...

Users experiencing greyed out "Log Off" buttons on CWA LTSR 2203.1

Upgraded Workspace app for Windows from 2203.1 to 2402 CU2...

CVE-2025-27678

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Client Remote Code Execution V-2023-001...

CVE-2024-4941

A local file inclusion vulnerability exists in the JSON component of gradio-app/gradio version 4.25. The vulnerability arises from improper input validation in the postprocess function within gradio/components/jsoncomponent.py, where a user-controlled string is parsed as JSON. If the parsed JSON...

Microsoft PC Manager Elevation of Privilege (November 2024)

The Windows 'Microsoft PC Manager' app installed on the remote host is affected by an elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported versi...

Exploit for CVE-2024-2432

CVE-2024-2432 Palo Alto GlobalProtect EoP On Windows system,...

PT-2024-20837 · Unknown · Simple Admin Panel

Name of the Vulnerable Software and Affected Versions: Simple Admin Panel App version 1.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter under the Add Category function...

PT-2024-20836 · Unknown · Simple Admin Panel

Name of the Vulnerable Software and Affected Versions: Simple Admin Panel App version 1.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter under the Add Category function...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line smaregiappmarket mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by revealing a channel access token...

Workspace App Upgrade to Version 2311 Causing End User Launch Failures

End users may experience launch issues post Upgrade of workspace app to latest version 2311,In environment where custom VC like Zoom, Webex are installed. Behavior noticed is launch failure with latest CWA 2311.CWA pops up "Preparing resource" CWA pops up "Active" but no desktop is shown to the...

CVE-2020-18912

An issue found in Earcms Ear App v.20181124 allows a remote attacker to execute arbitrary code via the uload/index-uplog.php...

Launch failure with CDViewer.exe crash on kernelbase.dll .Net Runtime with Workspace App 2305

Launching a published app or desktop using Workspace App for Windows version 2305.0 23.5.0 might fail with the following error seen in the Application event logs of the affected client, Exception 1 : CDViewer.exe ... System.Runtime.InteropServices.COMException ... Exception 2 : Failing applicatio...

CVE-2023-33293

An issue was discovered in KaiOS 3.0 and 3.1. The binary /system/kaios/api-daemon exposes a local web server on .localhost with subdomains for each installed applications, e.g., myapp.localhost. An attacker can make fetch requests to api-deamon to determine if a given app is installed and read th...

Expense Tracker SQL注入漏洞

Expense Tracker is an expense tracker organized by SourceCode and Projects. Earnings and Expense Tracker App version 1.0 suffers from a SQL injection vulnerability that originates from a sql injection via parameter id...

PT-2022-16529 · Unknown · Ourphoto App

Name of the Vulnerable Software and Affected Versions: Ourphoto App version 1.4.1 Description: The issue concerns the improper implementation of the user token authorization header on the /apiv1/ API endpoints. This allows an attacker to bypass authorization and session management by removing the...