852 matches found
EUVD-2021-27702
Malicious code in bioql PyPI...
EUVD-2021-30353
Malicious code in bioql PyPI...
EUVD-2024-33683
Malicious code in bioql PyPI...
EUVD-2025-2103
Malicious code in bioql PyPI...
EUVD-2021-8690
Malicious code in bioql PyPI...
EUVD-2025-11349
Malicious code in bioql PyPI...
EUVD-2024-41278
Malicious code in bioql PyPI...
EUVD-2025-30887
Malicious code in bioql PyPI...
EUVD-2023-41413
Malicious code in bioql PyPI...
Anadolu Hayat Emeklilik AHE Mobile 安全漏洞
Anadolu Hayat Emeklilik AHE Mobile is a pension plan mobile application from Anadolu Hayat Emeklilik, Turkey. A security vulnerability exists in Anadolu Hayat Emeklilik AHE Mobile version 1.9.7 up to and including version 1.9.9, which stems from a user-controllable key leading to an authorization...
WTW-EAGLE App 信任管理问题漏洞
WTW-EAGLE App is a mobile application from WTW that has the ability to provide risk management, insurance data access and analytics. A trust management issue vulnerability exists in the WTW-EAGLE App that stems from not properly validating server certificates, which could lead to a...
Seismic App 安全漏洞
Seismic App is a mobile application for a sales empowerment platform from Seismic USA. A security vulnerability exists in Seismic App version 2.4.2, which stems from an improper export of the file AndroidManifest.xml component and could lead to a local attack...
LinkedIn Mobile Application 安全漏洞
LinkedIn Mobile Application is a mobile application from LinkedIn Corporation USA. A security vulnerability exists in LinkedIn Mobile Application version 4.1.1087.2, which stems from a failed link preview metadata update and could lead to a phishing attack...
CVE-2025-50503
A vulnerability in the password reset workflow of the Touch Lebanon Mobile App 2.20.2 allows an attacker to bypass the OTP reset password mechanism. By manipulating the reset process, an unauthorized user may be able to reset the password and gain access to the account without needing to provide ...
CVE-2025-8393
A TLS vulnerability exists in the phone application used to manage a connected device. The phone application accepts self-signed certificates when establishing TLS communication which may result in man-in-the-middle attacks on untrusted networks. Captured communications may include user credentia...
The vulnerability of the Mobile Security Framework (MobSF), which stems from the lack of protective measures for website structures, allows attackers to carry out cross-site scripting attacks.
The vulnerability of the Mobile Security Framework for mobile application security research relates to the lack of protective measures for website structures. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...
CVE-2025-29629
Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 uses weak default credentials for secure shell access. This may result in attackers gaining access to exposed Gardyn Home Kits...
CVE-2025-36062
CVE-2025-36062 affects IBM Cognos Analytics Mobile (iOS) 1.1.0–1.1.22, with information exposure possible due to unencrypted network traffic. The NVD entry reports a high impact (C開 C:H, I:N, A:N) and CVSS v3.1 base score up to 7.5, while IBM’s bulletin lists additional related vulnerabilities an...