CVE-2025-14750

The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. A low-privileged user can modify the parameters and potentially manipulate account-level privileges...

CVE-2019-13097

The vulnerability CVE-2019-13097 affects Cat Runner Decorate Home for Android (version 2.8.0). The app’s API does not sufficiently verify inputs that are treated as immutable but can be controlled externally, allowing manipulation of users’ score parameters exchanged between client and server. No...