Ai2 Insecure Direct Object Reference

Ai2 is a Seattle based non-profit AI research institute. Ai2 provides a playground web application to chat that is susceptible to an insecure direct object reference vulnerability. An attacker can exploit this IDOR to tamper other users' conversation...

The vulnerability of the Endpoint Manager Mobile app for managing the lifecycle of mobile devices and applications (formerly known as MobileIron Core) arises from the lack of measures taken to neutralize specific elements. This allows a perpetrator to execute arbitrary code.

The vulnerability of the Ivanti Endpoint Manager Mobile EPMM application for managing the lifecycle of mobile devices and mobile applications formerly known as MobileIron Core is related to the lack of measures taken to neutralize special elements used in the operating system. Exploiting this...

CVE-2025-7908

creationtimestamp| type| source ---|---|--- 2025-07-20 23:06:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luglnpufwz2w...

CVE-2025-7907

creationtimestamp| type| source ---|---|--- 2025-07-20 22:56:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lugl3snhkj2j 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:40+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2025-7902

creationtimestamp| type| source ---|---|--- 2025-07-20 20:45:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lugdt6mjzv27 2025-09-09 20:56:45+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76...

CVE-2025-7898

creationtimestamp| type| source ---|---|--- 2025-07-20 20:30:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lugcyd7mb72v 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:40+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2025-7901

creationtimestamp| type| source ---|---|--- 2025-07-20 20:20:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lugcgg6vwc2i 2025-09-09 20:56:45+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76 2025-11-24 04:57:56+00:00| confirmed|...

CVE-2025-46385

creationtimestamp| type| source ---|---|--- 2025-07-20 16:36:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lufvvimar62o...

CVE-2025-7892

A vulnerability classified as problematic has been found in IDnow App up to 9.6.0 on Android. This affects an unknown part of the file AndroidManifest.xml of the component de.idnow. The manipulation leads to improper export of android application components. Local access is required to approach...

CVE-2025-7893

A vulnerability classified as problematic was found in Foresight News App up to 2.6.4 on Android. This vulnerability affects unknown code of the file AndroidManifest.xml of the component pro.foresightnews.appa. The manipulation leads to improper export of android application components. Attacking...

CVE-2025-7893

A vulnerability classified as problematic was found in Foresight News App up to 2.6.4 on Android. This vulnerability affects unknown code of the file AndroidManifest.xml of the component pro.foresightnews.appa. The manipulation leads to improper export of android application components. Attacking...

CVE-2025-7892

A vulnerability classified as problematic has been found in IDnow App up to 9.6.0 on Android. This affects an unknown part of the file AndroidManifest.xml of the component de.idnow. The manipulation leads to improper export of android application components. Local access is required to approach...

CVE-2025-7893 Foresight News App pro.foresightnews.appa AndroidManifest.xml improper export of android application components

A vulnerability classified as problematic was found in Foresight News App up to 2.6.4 on Android. This vulnerability affects unknown code of the file AndroidManifest.xml of the component pro.foresightnews.appa. The manipulation leads to improper export of android application components. Attacking...

CVE-2025-7893 Foresight News App pro.foresightnews.appa AndroidManifest.xml improper export of android application components

A vulnerability classified as problematic was found in Foresight News App up to 2.6.4 on Android. This vulnerability affects unknown code of the file AndroidManifest.xml of the component pro.foresightnews.appa. The manipulation leads to improper export of android application components. Attacking...

CVE-2025-7893

CVE-2025-7893 affects Foresight News App (Android) up to version 2.6.4, impacting the AndroidManifest.xml of the pro.foresightnews.appa component. The issue is improper export of Android application components, exploitable with local access. The exploit has been disclosed publicly. Remediation av...

CVE-2025-7891

A vulnerability was found in InstantBits Web Video Cast App up to 5.12.4 on Android. It has been rated as problematic. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.instantbits.cast.webvideo. The manipulation leads to improper export of...

CVE-2025-7890

A vulnerability was found in Dunamu StockPlus App up to 7.62.10 on Android. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.dunamu.stockplus. The manipulation leads to improper export of android...

CVE-2025-7889

A vulnerability was found in CallApp Caller ID App up to 2.0.4 on Android. It has been classified as problematic. Affected is an unknown function of the file AndroidManifest.xml of the component caller.id.phone.number.block. The manipulation leads to improper export of android application...

CVE-2025-7892

The CVE-2025-7892 entry concerns the IDnow App for Android up to version 9.6.0, specifically an issue in the AndroidManifest.xml for the de.idnow component that leads to improper export of application components. The root cause is described as manipulation of the manifest, with local access requi...

CVE-2025-7892 IDnow App de.idnow AndroidManifest.xml improper export of android application components

A vulnerability classified as problematic has been found in IDnow App up to 9.6.0 on Android. This affects an unknown part of the file AndroidManifest.xml of the component de.idnow. The manipulation leads to improper export of android application components. Local access is required to approach...