Lucene search
+L

366 matches found

Mend
Mend
•added 2025/03/24 3:01 p.m.•10 views

CVE-2025-1558

Mattermost Mobile Apps versions =2.25.0 fail to properly validate GIF images prior to rendering which allows a malicious user to cause the Android application to crash via message containing a maliciously crafted GIF...

7.1CVSS0.00384EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/03/24 3:01 p.m.•32 views

CVE-2025-1558 Denial of Service Via Malicious GIF

Mattermost Mobile Apps versions =2.25.0 fail to properly validate GIF images prior to rendering which allows a malicious user to cause the Android application to crash via message containing a maliciously crafted GIF...

6.5CVSS0.00384EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/03/24 3:01 p.m.•18 views

CVE-2025-1558 Denial of Service Via Malicious GIF

Mattermost Mobile Apps versions =2.25.0 fail to properly validate GIF images prior to rendering which allows a malicious user to cause the Android application to crash via message containing a maliciously crafted GIF...

6.5CVSS6.6AI score
SaveExploits0References3
CVE
CVE
•added 2025/03/24 3:01 p.m.•110 views

CVE-2025-1558

CVE-2025-1558 affects Mattermost Mobile Apps (versions ≤ 2.25.0). The root cause is improper validation of GIF images prior to rendering, which allows a remote attacker to crash the Android app via a message containing a specially crafted GIF. The vulnerability is described across multiple source...

6.5CVSS7AI score0.00384EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/03/24 1:47 p.m.•14 views

CVE-2025-30609 WordPress AppExperts plugin <= 1.4.3 - Sensitive Data Exposure Vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal AppExperts appexperts allows Retrieve Embedded Sensitive Data.This issue affects AppExperts: from n/a through = 1.4.3...

5.3CVSS7.3AI score0.00396EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/24 12:00 a.m.•24 views

Mattermost Mobile Apps Security Vulnerabilities

Mattermost Mobile Apps is a messaging mobile application from Mattermost USA. A denial of service vulnerability exists in Mattermost Mobile Apps version 2.25.0, which stems from an improperly validated GIF image, and can be exploited by an attacker to crash an Android application via a message...

6.5CVSS6.6AI score0.00384EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/24 12:00 a.m.•7 views

CVE-2025-1558: Improper Validation of Specified Type of Input

Mattermost Mobile Apps versions =2.25.0 fail to properly validate GIF images prior to rendering which allows a malicious user to cause the Android application to crash via message containing a maliciously crafted GIF...

6.5CVSS6.6AI score0.00384EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/17 12:00 a.m.•9 views

PT-2025-12657

Name of the Vulnerable Software and Affected Versions Mattermost Mobile Apps versions =2.25.0 Description The issue is related to the improper validation of GIF images prior to rendering, which allows a malicious user to cause the Android application to crash via a message containing a maliciousl...

6.8CVSS0.00384EPSS
SaveExploits0References8
Malwarebytes
Malwarebytes
•added 2025/03/10 4:06 p.m.•24 views

How ads weirdly know your screen brightness, headphone jack use, and location, with Tim Shott (Lock and Code S06E05)

This week on the Lock and Code podcast … Something's not right in the world of location data. In January, a location data broker named Gravy Analytics was hacked, with the alleged cybercriminal behind the attack posting an enormous amount of data online as proof. Though relatively unknown to most...

7.5AI score
SaveExploits0
CNVD
CNVD
•added 2025/01/24 12:00 a.m.•22 views

Mattermost Mobile Apps Denial of Service Vulnerability (CNVD-2025-11092)

Mattermost Mobile Apps is a messaging mobile application from Mattermost USA. A denial of service vulnerability exists in Mattermost Mobile Apps that stems from a failure to properly validate post props, which can be exploited by an attacker to cause the application to crash...

6.5CVSS6.9AI score0.00543EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/01/24 12:00 a.m.•17 views

Mattermost Mobile Apps Denial of Service Vulnerability (CNVD-2025-11094)

Mattermost Mobile Apps is a messaging mobile application from Mattermost USA. A denial of service vulnerability exists in Mattermost Mobile Apps that stems from the application failing to properly handle specially crafted attachment names. An attacker could use this vulnerability to cause the...

4.3CVSS6.9AI score0.00381EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/01/24 12:00 a.m.•21 views

Mattermost Mobile Apps Denial of Service Vulnerability (CNVD-2025-11093)

Mattermost Mobile Apps is a messaging mobile application from Mattermost USA. Mattermost Mobile Apps suffers from a denial of service vulnerability that stems from a failure to properly validate post attributes. An attacker could exploit the vulnerability to cause the application to crash...

6.5CVSS6.9AI score0.00543EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/16 12:15 a.m.•22 views

CVE-2025-0476

Mattermost Mobile Apps versions =2.22.0 fail to properly handle specially crafted attachment names, which allows an attacker to crash the mobile app for any user who opened a channel containing the specially crafted attachment...

4.3CVSS0.00381EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/16 12:00 a.m.•24 views

Mattermost Mobile Apps Security Vulnerabilities

Mattermost Mobile Apps is a messaging mobile application from Mattermost USA. A security vulnerability exists in Mattermost Mobile Apps version 2.22.0 that stems from an inability to properly handle posts with attachments, allowing an attacker to cause a mobile device to crash by creating such a...

7.5CVSS6.5AI score0.00612EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/16 12:00 a.m.•9 views

CVE-2025-0476: Improper Validation of Specified Type of Input

Mattermost Mobile Apps versions =2.22.0 fail to properly handle specially crafted attachment names, which allows an attacker to crash the mobile app for any user who opened a channel containing the specially crafted attachment...

4.3CVSS5.8AI score0.00381EPSS
SaveExploits0References1
Mend
Mend
•added 2025/01/15 11:44 p.m.•8 views

CVE-2025-0476

Mattermost Mobile Apps versions =2.22.0 fail to properly handle specially crafted attachment names, which allows an attacker to crash the mobile app for any user who opened a channel containing the specially crafted attachment...

5.3CVSS0.00381EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2025/01/15 11:44 p.m.•13 views

CVE-2025-0476 Mobile crash via file with specially crafted filename

Mattermost Mobile Apps versions =2.22.0 fail to properly handle specially crafted attachment names, which allows an attacker to crash the mobile app for any user who opened a channel containing the specially crafted attachment...

4.3CVSS6AI score
SaveExploits0References3
CVE
CVE
•added 2025/01/15 11:44 p.m.•81 views

CVE-2025-0476

Mattermost Mobile Apps (versions &lt;= 2.22.0) are vulnerable due to improper handling of specially crafted attachment names, which can crash the mobile app for any user who opens a channel containing such an attachment. The issue is a denial-of-service-like crash rather than data disclosure. Aff...

4.3CVSS4.6AI score0.00381EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/01/15 11:44 p.m.•15 views

CVE-2025-0476 Mobile crash via file with specially crafted filename

Mattermost Mobile Apps versions =2.22.0 fail to properly handle specially crafted attachment names, which allows an attacker to crash the mobile app for any user who opened a channel containing the specially crafted attachment...

4.3CVSS6.8AI score0.00381EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/15 11:44 p.m.•37 views

CVE-2025-0476 Mobile crash via file with specially crafted filename

Mattermost Mobile Apps versions =2.22.0 fail to properly handle specially crafted attachment names, which allows an attacker to crash the mobile app for any user who opened a channel containing the specially crafted attachment...

4.3CVSS0.00381EPSS
SaveExploits0References1
Rows per page
Query Builder