18 matches found
EUVD-2014-5792
Malware in sbrugna...
EUVD-2025-26314
Malicious code in bioql PyPI...
CVE-2025-9749
A vulnerability was identified in HKritesh009 Grocery List Management Web App up to f491b681eb70d465f445c9a721415c965190f83b. This affects an unknown part of the file /src/update.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2025-9749
A vulnerability was identified in HKritesh009 Grocery List Management Web App up to f491b681eb70d465f445c9a721415c965190f83b. This affects an unknown part of the file /src/update.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2025-9749 HKritesh009 Grocery List Management Web App update.php sql injection
A vulnerability was identified in HKritesh009 Grocery List Management Web App up to f491b681eb70d465f445c9a721415c965190f83b. This affects an unknown part of the file /src/update.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2025-9749
CVE-2025-9749 affects HKritesh009 Grocery List Management Web App (up to f491b681eb70d465f445c9a721415c965190f83b). The vulnerability is an SQL injection in an unknown portion of /src/update.php triggered by manipulating the ID parameter, with remote exploitation possible. Public exploit exists. ...
CVE-2025-9749 HKritesh009 Grocery List Management Web App update.php sql injection
A vulnerability was identified in HKritesh009 Grocery List Management Web App up to f491b681eb70d465f445c9a721415c965190f83b. This affects an unknown part of the file /src/update.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The...
Grocery List Management Web App 安全漏洞
Grocery List Management Web App is a grocery list management system by the individual developer Ritesh Dhurve. A security vulnerability exists in Grocery List Management Web App that stems from a SQL injection attack due to incorrect manipulation of the parameter ID in the file /src/update.php...
CVE-2025-9749: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in HKritesh009 Grocery List Management Web App up to f491b681eb70d465f445c9a721415c965190f83b. This affects an unknown part of the file /src/update.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The...
PT-2025-35430
Name of the Vulnerable Software and Affected Versions: HKritesh009 Grocery List Management Web App affected versions not specified Description: A SQL injection issue exists in the /src/update.php file. Manipulation of the ID argument can trigger the issue, allowing for remote exploitation. The...
Grocery List - rShopping - ContentProvider mode not defined, Dangerous filesystem permissions, Exported components vulnerabilities
HackApp vulnerability scanner discovered that application Grocery List - rShopping published at the 'play' market has multiple vulnerabilities...
Buy Me a Pie! Grocery List - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Buy Me a Pie! Grocery List published at the 'play' market has multiple vulnerabilities...
CVE-2014-5905
The Grocery List - Tomatoes aka com.meucarrinho application 5.1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Grocery List - Tomatoes aka com.meucarrinho application 5.1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5905
The Grocery List - Tomatoes aka com.meucarrinho application 5.1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5905
The Grocery List - Tomatoes (aka com.meucarrinho) Android app 5.1.4 does not verify SSL certificates, allowing MITM attackers to spoof servers and access sensitive data via crafted certificates. Root cause: failure to validate X.509 server certificates during TLS connections. Impact: disclosure o...
CVE-2014-5905: Undefined Security Weakness
The Grocery List - Tomatoes aka com.meucarrinho application 5.1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
PT-2014-6890
Name of the Vulnerable Software and Affected Versions The Grocery List - Tomatoes aka com.meucarrinho version 5.1.4 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...