Lucene search
+L

1020 matches found

Positive Technologies
Positive Technologies
•added 2025/11/13 12:00 a.m.•28 views

PT-2025-46874

Name of the Vulnerable Software and Affected Versions Mattermost Mobile Apps versions prior to 2.32.0 Description The Mattermost Mobile Apps do not properly validate Single Sign-On SSO redirect tokens to ensure they come from a trusted server. This allows a malicious Mattermost instance or an...

6.1CVSS6.6AI score0.00144EPSS
SaveExploits0References3
Malwarebytes
Malwarebytes
•added 2025/11/03 4:01 p.m.•25 views

Attack of the clones: Fake ChatGPT apps are everywhere

The mobile AI gold rush has flooded app stores with lookalikes—shiny, convincing apps promising “AI image generation,” “smart chat,” or “instant productivity.” But behind the flashy logos lurks a spectrum of fake apps, from harmless copycats to outright spyware. Spoofing trusted brands like...

7AI score
SaveExploits0
Vulnrichment
Vulnrichment
•added 2025/10/30 12:00 a.m.•7 views

CVE-2025-61118

mCarFix Motorists App version 2.3 package name com.skytop.mcarfix, developed by Paniel Mwaura, contains improper access control vulnerabilities. Attackers may bypass verification to arbitrarily register accounts, and by tampering with sequential numeric IDs, gain unauthorized access to user data...

6.7AI score0.00314EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/30 12:00 a.m.•3 views

CVE-2025-11881: Missing Authorization

The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'myapppverify' function in all versions up to, and including, 4.5.0. This makes it possible for unauthenticated attackers to extract sensitive data...

5.3CVSS5.7AI score0.00304EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/10/24 12:00 a.m.•19 views

WordPress AppExperts plugin information disclosure vulnerability

WordPress AppExperts plugin is a plugin for converting WordPress websites to iOS and Android mobile apps, with support for converting WooCommerce e-commerce platform features. WordPress AppExperts plugin suffers from an information disclosure vulnerability that originates from the insertion of...

5.8CVSS6.2AI score0.00297EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/12 12:00 a.m.•0 views

CVE-2025-11645: Insecure Storage of Sensitive Information

A security vulnerability has been detected in Tomofun Furbo Mobile App up to 7.57.0a on Android. This affects an unknown part of the component Authentication Token Handler. The manipulation leads to insecure storage of sensitive information. It is possible to launch the attack on the physical...

2.4CVSS5.1AI score0.00196EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/12 12:00 a.m.•8 views

Tomofun Furbo Mobile App 安全漏洞

Tomofun Furbo Mobile App is a mobile application for pet cameras from Tomofun, a Taiwan, China-based company. A security vulnerability exists in Tomofun Furbo Mobile App version 7.57.0a and prior versions, which originates from the component Authentication Token Handler insecurely storing sensiti...

2.4CVSS4AI score0.00196EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/10/10 1:32 a.m.•31 views

CVE-2025-5009

In Gemini iOS, when a user shared a snippet of a conversation, it would share the entire conversation via a sharable public link that contained the entire conversation history and not just the snippet...

1CVSS6.8AI score0.00124EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/08 3:31 p.m.•7 views

CVE-2025-5009 Information Disclosure in Gemini iOS App

In Gemini iOS, when a user shared a snippet of a conversation, it would share the entire conversation via a sharable public link that contained the entire conversation history and not just the snippet...

1CVSS6.5AI score0.00124EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/08 3:31 p.m.•45 views

CVE-2025-5009

In Gemini iOS, the sharing flow for a conversation snippet inadvertently exposes the entire conversation history via a publicly accessible link. Affected software: Gemini iOS. Root cause: the share mechanism does not limit content to the selected snippet, leading to information disclosure of prev...

1CVSS6.5AI score0.00124EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2012-2632

Malware in sbrugna...

5CVSS6.4AI score0.01918EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2017-18492

Malware in sbrugna...

5.9CVSS5.9AI score0.00486EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2020-26689

Malware in sbrugna...

5.9CVSS5.4AI score0.00497EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2020-29638

Malware in sbrugna...

9.8CVSS9.2AI score0.01654EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2020-30534

Malware in sbrugna...

5.3CVSS5.6AI score0.00725EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2019-3184

Malware in sbrugna...

6.1CVSS6.3AI score0.0209EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2020-29640

Malware in sbrugna...

5.3CVSS5.5AI score0.00972EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2017-18522

Malware in sbrugna...

5.9CVSS6AI score0.00477EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2015-2690

Malware in sbrugna...

3.5CVSS6.5AI score0.01174EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•8 views

EUVD-2014-5893

Malware in sbrugna...

5.4CVSS6.4AI score0.00271EPSS
SaveExploits0References4
Rows per page
Query Builder