CVE-2026-101644

A vulnerability exists in the Internal Operations component of Oracle Mobile Field Service within Oracle E-Business Suite . Affected versions include 12.2.3-12.2.15 . A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the prod...

CVE-2026-101636

The Oracle Mobile Field Service product, specifically the Admin UI component within Oracle E-Business Suite , is affected by a high-severity vulnerability in versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to c...

CVE-2026-101634

A critical vulnerability exists in the Internal Operations component of Oracle Mobile Field Service (Oracle E-Business Suite), affecting supported versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the service. Successful ...

CVE-2026-101635

The Oracle Mobile Field Service product within Oracle E-Business Suite (component: Internal Operations ) is affected by a vulnerability in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service, potentially leading t...

dockerized-android

Dockerized Android Dockerized Android is a container-based framework that allows to execute and Android Emulator inside Docker and control it through a browser. This project has been developed in order to provide a starting point for integrating mobile security components into Cyber Ranges but it...

CVE-2026-113249

Improper input validation in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113249

Google Chrome on iOS versions prior to 156.0.8078.47 is vulnerable to improper input validation . A remote attacker can exploit this flaw by hosting a crafted HTML page , potentially leading to arbitrary code execution within the browser sandbox. No specific exploit information or direct remediat...

CVE-2026-113249

Improper input validation in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113196

Improper access control in Google Chrome on iOS (prior to version 156.0.8078.47 ) allows a remote attacker to bypass the web origin policy using a crafted HTML page. This vulnerability is classified with a Medium security severity by Chromium. No specific exploits or scanner source code are provi...

CVE-2026-113196

Improper access control in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

DVIA-v2

DVIA-v2 Powered by 8ksec.io DVIA-v2 written in Swift along with additional vulnerabilities Damn Vulnerable iOS App DVIA is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration...

CVE-2024-24919---Poc

CVE-2024-24919 PoC a Proof of Concept of CVE-2024-24919 Read about it - https://nvd.nist.gov/vuln/detail/CVE-2024-24919 The vulnerability allows an unauthenticated remote attacker to read the contents of an arbitrary file located on the affected appliance. Description Potentially allowing an...

apkx

apkx - Android APK Decompilation for the Lazy A Python wrapper to popular free dex converters and Java decompilers. Extracts Java source code directly from the APK. Useful for experimenting with different converters/decompilers without having to worry about classpath settings and command line arg...

StaCoAn

StaCoAn Not maintained anymore! Will be archived soon. StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications. This tool will look for interesting lines in the code which can contain: Hardcoded credential...

cuckoo-droid

CuckooDroid - Automated Android Malware Analysis. Contributed By Check Point Software Technologies LTD. CuckooDroid is an extension of Cuckoo Sandbox the Open Source software for automating analysis of suspicious files, CuckooDroid brigs to cuckoo the capabilities of execution and analysis of...

MARA_Framework

MARAFramework MARA is a M obile A pplication R everse engineering and A nalysis Framework. It is a tool that puts together commonly used mobile application reverse engineering and analysis tools, to assist in testing mobile applications against the OWASP mobile security threats. Its objective is ...

Adhrit

Adhrit is an open source Android APK reversing and analysis suite. The tool is an effort to find an efficient solution to all the needs of mobile security testing and automation. Adhrit has been built with a focus on flexibility and mudularization. Adhrit currently uses the Ghera benchmarks to...

CVE-2024-24919-CHECKPOINT

CVE-2024-24919 Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available. FIRST: I AM NOT RESPONSIB...

DVHMA

DVHMA Damn Vulnerable Hybrid Mobile App DVHMA is an hybrid mobile app for Android that intentionally contains vulnerabilities. Its purpose is to enable security professionals to test their tools and techniques legally, help developers better understand the common pitfalls in developing hybrid...

rainmap-lite

rainmap-lite Rainmap Lite - Responsive web application that allows users to launch Nmap scans from their mobiles/tablets/web browsers! Unlike it's predecessor 1, Rainmap-lite does not require special services RabbitMQ, PostgreSQL, Celery, supervisor, etc to make it easy to install on any server...