EUVD-2025-25283

Malicious code in bioql PyPI...

EUVD-2024-52233

Malicious code in bioql PyPI...

EUVD-2023-26159

Malicious code in bioql PyPI...

EUVD-2025-0235

Malicious code in bioql PyPI...

EUVD-2025-0237

Malicious code in bioql PyPI...

EUVD-2022-7085

Malicious code in bioql PyPI...

EUVD-2022-44226

Malicious code in bioql PyPI...

EUVD-2025-8857

Malicious code in bioql PyPI...

EUVD-2024-1024

Malicious code in bioql PyPI...

EUVD-2023-45693

Malicious code in bioql PyPI...

EUVD-2023-45695

Malicious code in bioql PyPI...

EUVD-2025-13371

Malicious code in bioql PyPI...

CVE-2023-21467

Error in 3GPP specification implementation in Exynos baseband prior to SMR Apr-2023 Release 1 allows incorrect handling of unencrypted message...

Directory Traversal

Overview mobsf is a Mobile Security Framework MobSF is an automated, all-in-one mobile application Android/iOS/Windows pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. Affected versions of this package are vulnerable to Directory...

CVE-2025-58162 MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction

MobSF is a mobile application security testing tool used. In version 4.4.0, an authenticated user who uploaded a specially prepared one.a, can write arbitrary files to any directory writable by the user of the MobSF process. This issue has been patched in version 4.4.1...

Mobile Security Framework 路径遍历漏洞

Mobile Security Framework MobSF is an automated all-in-one mobile application from Mobile Security Framework open source. Used for penetration testing, malware analysis and security assessments, it is capable of performing both static and dynamic analysis. A path traversal vulnerability exists in...

Mobile Security Framework 路径遍历漏洞

Mobile Security Framework MobSF is an automated all-in-one mobile application from Mobile Security Framework open source. It is used for penetration testing, malware analysis and security assessments, and is capable of performing both static and dynamic analysis. A path traversal vulnerability...

PT-2025-35521

Name of the Vulnerable Software and Affected Versions MobSF version 4.4.0 Description The GET /download/ route uses string path verification via os.path.commonprefix, which allows an authenticated user to download files outside the intended download directory from neighboring directories with...

PT-2025-35522

Name of the Vulnerable Software and Affected Versions MobSF version 4.4.0 Description MobSF is a mobile application security testing tool. An authenticated user who uploaded a specially prepared one.a file could write arbitrary files to any directory writable by the user of the MobSF process. Thi...

CVE-2025-58162

creationtimestamp| type| source ---|---|--- 2025-08-31 02:35:35+00:00| published-proof-of-concept| https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-9gh8-9r95-3fc3...