deep-C

Deep-C Deep-C is an Android Deep Link Exploitation Framework that automatically decompiles APKs, identifies exposed and insecure deep link entry points, validates exploitability using static analysis and optional AI verification , and generates executable adb Proof-of-Concepts PoCs. Deep-C is...

CVE-2023-41898_Lab

CVE-2023-41898 Unvalidated Deep Link Lab This is an educational, reduced-scope reproduction Lab built based on the public vulnerability report GHSL-2023-142 for Home Assistant Companion for Android and the open-source structure of the vulnerable version 2023.8.2. It does not use a real Home...

CVE-2026-26897-EcoOnline-DeepLink

EcoOnline EHS Android — Deep Link Validation Bypass → WebView Open Redirect CVE-2026-26897 Public disclosure / advisory for CVE-2026-26897 , a deep link validation bypass in the EcoOnline EHS Android application com.airsweb.v10. A crafted ehs-app:// deep link is rewritten to https:// and loaded...

viber-desktop-html-injection

Viber Desktop — HTML Injection CVE-2025-55996 CVE: CVE-2025-55996 Discoverer: Thaw Khant Cycbake Product: Viber Desktop Affected: Viber Desktop 25.6.0 and possibly earlier Summary Viber Desktop's deep-link handler viber://forward?text= can render unsanitized HTML supplied in the text parameter...

CVE-2026-118677

n8n before 2.41.4 and 2.42.x before 2.42.1 contains a missing confirmation vulnerability in the Local Gateway desktop app that allows its deep-link connect handler to silently re-pair the app with a different n8n instance. Attackers can lure users running the Local Gateway into opening a crafted...

CVE-2026-118677 n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance

n8n before 2.41.4 and 2.42.x before 2.42.1 contains a missing confirmation vulnerability in the Local Gateway desktop app that allows its deep-link connect handler to silently re-pair the app with a different n8n instance. Attackers can lure users running the Local Gateway into opening a crafted...

EUVD-2026-112383

n8n before 2.41.4 and 2.42.x before 2.42.1 contains a missing confirmation vulnerability in the Local Gateway desktop app that allows its deep-link connect handler to silently re-pair the app with a different n8n instance. Attackers can lure users running the Local Gateway into opening a crafted...

CVE-2026-118677

n8n before 2.41.4 and 2.42.x before 2.42.1 contains a missing confirmation vulnerability in the Local Gateway desktop app that allows its deep-link connect handler to silently re-pair the app with a different n8n instance. Attackers can lure users running the Local Gateway into opening a crafted...

CVE-2026-118677 n8n before 2.41.4 and 2.42.1 Local Gateway Deep-Link Silent Re-pairing to Attacker Instance

n8n before 2.41.4 and 2.42.x before 2.42.1 contains a missing confirmation vulnerability in the Local Gateway desktop app that allows its deep-link connect handler to silently re-pair the app with a different n8n instance. Attackers can lure users running the Local Gateway into opening a crafted...

CVE-2026-118677

The n8n Local Gateway desktop app versions before 2.41.4 and 2.42.x before 2.42.1 are vulnerable to a missing confirmation flaw in the deep-link connect handler. This allows an attacker to lure users into clicking a crafted n8n-computer-use:// link, which can silently re-pair the app with an atta...

n8n authorization issue vulnerability

Versions prior to n8n 2.41.4 and versions 2.42.x prior to 2.42.1 contain an authorization issue vulnerability. This vulnerability stems from a lack of confirmation mechanisms in the Local Gateway desktop application. Its deep link handler can silently re-pair the application to a different n8n...

PT-2026-129151

n8n before 2.41.4 and 2.42.x before 2.42.1 contains a missing confirmation vulnerability in the Local Gateway desktop app that allows its deep-link connect handler to silently re-pair the app with a different n8n instance. Attackers can lure users running the Local Gateway into opening a crafted...

CVE-2026-118677: n8n-io n8n: n8n before 2.41.4 and 2.42.x before 2.42.1 contains a missing confirmation vulnerability in the Local Gateway desktop…

n8n before 2.41.4 and 2.42.x before 2.42.1 contains a missing confirmation vulnerability in the Local Gateway desktop app that allows its deep-link connect handler to silently re-pair the app with a different n8n instance. Attackers can lure users running the Local Gateway into opening a crafted...

CVE-2026-114222

NT OneAPP developed by NewType Infortech has an Authentication Bypass vulnerability. Unauthenticated local attackers can bypass the App PIN lock mechanism via a Deep Link, thereby accessing protected resources of a logged-in user...

EUVD-2026-108005

NT OneAPP developed by NewType Infortech has an Authentication Bypass vulnerability. Unauthenticated local attackers can bypass the App PIN lock mechanism via a Deep Link, thereby accessing protected resources of a logged-in user...

CVE-2026-114222 NewType Infortech｜NT OneAPP - Authentication Bypass

NT OneAPP developed by NewType Infortech has an Authentication Bypass vulnerability. Unauthenticated local attackers can bypass the App PIN lock mechanism via a Deep Link, thereby accessing protected resources of a logged-in user...

CVE-2026-114222

The NT OneAPP application developed by NewType Infortech contains an Authentication Bypass vulnerability. Unauthenticated local attackers can exploit a Deep Link to bypass the App PIN lock mechanism . This allows the attacker to gain unauthorized access to the protected resources of a logged-in u...

CVE-2026-114222 NewType Infortech｜NT OneAPP - Authentication Bypass

NT OneAPP developed by NewType Infortech has an Authentication Bypass vulnerability. Unauthenticated local attackers can bypass the App PIN lock mechanism via a Deep Link, thereby accessing protected resources of a logged-in user...

PT-2026-121262

NT OneAPP developed by NewType Infortech has an Authentication Bypass vulnerability. Unauthenticated local attackers can bypass the App PIN lock mechanism via a Deep Link, thereby accessing protected resources of a logged-in user...

NewType Infortech NT OneAPP authorization issue vulnerability

NewType Infortech NT OneAPP versions 1.5.22 and earlier contain an authorization issue vulnerability. This vulnerability stems from authentication bypass; unauthenticated local attackers can use Deep Link to circumvent the App PIN lock mechanism, thereby gaining access to protected resources...