Lucene search
+L

1078 matches found

CNNVD
CNNVD
•added 2024/09/17 12:00 a.m.•21 views

Apple iOS 和 iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 18 and iPadOS version 18, which stems from the fact that an attacker...

4.6CVSS5.8AI score0.0027EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/09/04 12:00 a.m.•17 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Sep-2024 Release 1 version and prior versions, which stems from a My Files component tha...

6.2CVSS6.5AI score0.00129EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/09/04 12:00 a.m.•16 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices SMR Sep-2024 Release 1 version and prior versions, which stems from the CocktailbarService component containing an...

4CVSS6.6AI score0.00132EPSS
SaveExploits0References2
Mend
Mend
•added 2024/08/19 2:44 p.m.•2 views

CVE-2024-43399

Mobile Security Framework MobSF is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. Before 4.0.7, there is a flaw in the Static Libraries analysis section. Specifically, during the extraction of .a extension files, the measure...

9.8CVSS0.00956EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
•added 2024/08/19 2:44 p.m.•35 views

CVE-2024-43399 Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Files

Mobile Security Framework MobSF is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. Before 4.0.7, there is a flaw in the Static Libraries analysis section. Specifically, during the extraction of .a extension files, the measure...

8CVSS7.6AI score0.00956EPSS
SaveExploits1References2
CVE
CVE
•added 2024/08/19 2:44 p.m.•76 views

CVE-2024-43399

MobSF (Mobile Security Framework) prior to version 4.0.7 contains a Zip Slip vulnerability in the Static Libraries analysis when extracting .a files. The mitigation (decoding and string replacement) is bypassable (e.g., using sequences like ....//....//....//), allowing extraction to arbitrary se...

9.8CVSS7.6AI score0.00956EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/08/19 12:00 a.m.•25 views

The vulnerability of the Mobile Security Framework (MobSF), which involves redirecting URLs to unreliable websites, allows attackers to carry out phishing attacks using specially created malicious links.

The vulnerability of the Mobile Security Framework MobSF for mobile application security research involves redirecting URLs to unreliable websites. Exploiting this vulnerability allows attackers to carry out phishing attacks using specially created malicious links...

6.8CVSS5.4AI score0.01EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2024/08/19 12:00 a.m.•17 views

Mobile Security Framework 安全漏洞

Mobile Security Framework MobSF is an automated all-in-one mobile application open-sourced by Mobile Security Framework. Used for penetration testing, malware analysis and security assessments, it is capable of performing both static and dynamic analysis. A security vulnerability exists in Mobile...

9.8CVSS6.4AI score0.00956EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/19 12:00 a.m.•3 views

CVE-2024-43399: Relative Path Traversal

Mobile Security Framework MobSF is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. Before 4.0.7, there is a flaw in the Static Libraries analysis section. Specifically, during the extraction of .a extension files, the measure...

9.8CVSS5.9AI score0.00956EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/08/19 12:00 a.m.•21 views

PT-2024-30558

Name of the Vulnerable Software and Affected Versions Mobile Security Framework MobSF versions prior to 4.0.7 Description The issue is related to a flaw in the Static Libraries analysis section of MobSF, specifically during the extraction of .a extension files. The measure intended to prevent Zip...

9.8CVSS6.2AI score0.00956EPSS
SaveExploits1References28
Wired Threat Level
Wired Threat Level
•added 2024/08/09 10:55 p.m.•20 views

Google Researchers Found Nearly a Dozen Flaws in Popular Qualcomm Software for Mobile GPUs

The vulnerabilities, which have been patched, may have novel appeal to attackers as an avenue to compromising phones...

7.4AI score
SaveExploits0
Veracode
Veracode
•added 2024/08/01 8:10 p.m.•17 views

Open Redirection

Mobile Security Framework MobSF is vulnerable to Open Redirection. The vulnerability is due to URL redirection to Untrusted Site through the authentication view by manipulating the redirect URL after a successful login...

5.4CVSS6.8AI score0.01EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2024/07/31 8:15 p.m.•58 views

CVE-2024-41955

Mobile Security Framework MobSF is a security research platform for mobile applications in Android, iOS and Windows Mobile. An open redirect vulnerability exist in MobSF authentication view. Update to MobSF v4.0.5...

5.4CVSS0.01EPSS
SaveExploits1References2
CVE
CVE
•added 2024/07/31 7:21 p.m.•91 views

CVE-2024-41955

Summary: CVE-2024-41955 affects Mobile Security Framework (MobSF). The vulnerability is an open redirect in the authentication view, potentially allowing an attacker to redirect authenticated users to a malicious site after login. Multiple sources document this as MobSF open redirect, with remedi...

5.4CVSS5.2AI score0.01EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2024/07/31 7:21 p.m.•26 views

CVE-2024-41955 Mobile Security Framework (MobSF) has an Open Redirect in Login Redirect

Mobile Security Framework MobSF is a security research platform for mobile applications in Android, iOS and Windows Mobile. An open redirect vulnerability exist in MobSF authentication view. Update to MobSF v4.0.5...

5.2CVSS6.6AI score
SaveExploits0References4
EUVD
EUVD
•added 2024/07/31 7:21 p.m.•21 views

EUVD-2024-2299

Mobile Security Framework MobSF is a security research platform for mobile applications in Android, iOS and Windows Mobile. An open redirect vulnerability exist in MobSF authentication view. Update to MobSF v4.0.5...

5.4CVSS6.3AI score0.01EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/07/31 12:00 a.m.•16 views

PT-2024-5612

Name of the Vulnerable Software and Affected Versions Mobile Security Framework MobSF versions prior to 4.0.5 Description The issue is related to an open redirect vulnerability in the authentication view of Mobile Security Framework MobSF, a security research platform for mobile applications. Thi...

6.8CVSS6.1AI score0.01EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/31 12:00 a.m.•5 views

CVE-2024-41955: URL Redirection to Untrusted Site

Mobile Security Framework MobSF is a security research platform for mobile applications in Android, iOS and Windows Mobile. An open redirect vulnerability exist in MobSF authentication view. Update to MobSF v4.0.5...

5.4CVSS6AI score0.01EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/07/31 12:00 a.m.•22 views

Mobile Security Framework 安全漏洞

Mobile Security Framework MobSF is an automated all-in-one mobile application open-sourced by Mobile Security Framework. It is used for penetration testing, malware analysis, and security assessments, and is capable of performing both static and dynamic analysis. A security vulnerability exists i...

5.4CVSS6.7AI score0.01EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/07/29 12:00 a.m.•23 views

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS prior to version 17.6 and iPadOS prior to version 17.6, which arises from the...

4.6CVSS5.8AI score0.00362EPSS
SaveExploits0References3
Rows per page
Query Builder