31772 matches found
EUVD-2026-55240
A server-side request forgery SSRF vulnerability in automatisch through commit 41f3c56 allows a low-privileged authenticated user with 'manage Flow' permission to make the server fetch arbitrary URLs and retrieve the full response body via the HTTP Request app's Custom Request action...
CVE-2026-72566 automatisch - Server-Side Request Forgery via HTTP Request Custom Action
A server-side request forgery SSRF vulnerability in automatisch through commit 41f3c56 allows a low-privileged authenticated user with 'manage Flow' permission to make the server fetch arbitrary URLs and retrieve the full response body via the HTTP Request app's Custom Request action...
CVE-2026-66410
Android and iOS apps ECOVACS PRO App improperly validate server certificates. Communication may be retrieved and/or altered...
CVE-2026-21059
Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege...
CVE-2026-66410
Android and iOS apps ECOVACS PRO App improperly validate server certificates. Communication may be retrieved and/or altered...
EUVD-2026-55117
Android and iOS apps ECOVACS PRO App improperly validate server certificates. Communication may be retrieved and/or altered...
CVE-2026-66410
CVE-2026-66410 affects the Android and iOS ECOVACS PRO App, with improper server certificate validation in the smartphone app. The vulnerability can allow a man-in-the-middle to retrieve and/or alter communications between the app and servers. Connected documents confirm the issue and reference r...
CVE-2026-66410
Android and iOS apps ECOVACS PRO App improperly validate server certificates. Communication may be retrieved and/or altered...
EUVD-2026-55088
Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function...
CVE-2026-21063
CVE-2026-21063 affects the AppLock component on Android. The issue is an improper export of Android application components, enabling physical attackers to bypass the app lock function. According to the CVE metrics, the exploit has a base CVSS v4.0 score of 6.8 (Medium) with Attack Vector Physical...
CVE-2026-21063
Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function...
CVE-2026-21059
Samsung Contacts (prior to SMR Aug-2026 Release 1) improperly exports Android application components, allowing local attackers with low privileges to delete files under the app's elevated privileges. CISA SSVC marks exploitation as "none"; no exploit code is known. Apply the SMR Aug-2026 Release ...
CVE-2026-21058
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege...
CVE-2026-63637
creationtimestamp| type| source ---|---|--- 2026-08-10 01:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msovkxeczc27...
CVE-2026-71560
creationtimestamp| type| source ---|---|--- 2026-08-09 02:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msmkikjovq23...
CVE-2026-15054
creationtimestamp| type| source ---|---|--- 2026-08-08 23:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msm7b7gyb525 2026-08-09 19:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msoccxmwyb22...
CVE-2026-15215
creationtimestamp| type| source ---|---|--- 2026-08-08 15:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msldkvwsrd2a...
CVE-2026-14526
creationtimestamp| type| source ---|---|--- 2026-08-08 09:48:55+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msks5rpsg62f 2026-08-08 13:31:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/117060129732420475 2026-08-08 22:17:16+00:00| seen|...
