24579 matches found
CVE-2026-107153: Use of Weak Credentials
Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot AVB functionality. With physical access to the affected device, a crafted system image may be installed...
PT-2026-113642
Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot AVB functionality. With physical access to the affected device, a crafted system image may be installed...
CVE-2026-97800
Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally...
CVE-2026-70216
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally...
CVE-2026-70216
A vulnerability exists in Windows Mobile Device Management due to insufficient granularity of access control . This flaw allows an authorized attacker to perform tampering locally . The vulnerability has a CVSS 3.1 score of 5.5 (Medium) and is associated with CWE-1220 . No specific details regard...
CVE-2026-97800
A vulnerability in Windows Mobile Broadband arises from an incorrect permission assignment for a critical resource. This flaw allows an authorized attacker to achieve local privilege elevation . While the CVSS 3.1 score reflects a High severity (7.8), specific details regarding the affected compo...
EUVD-2026-99066
Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally...
CVE-2026-110127 waynboot-mall through 2.0.0 IDOR via Mobile Cart Endpoints
waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in the mobile CartController that allows authenticated members to modify or delete other members' cart items. Attackers can enumerate sequential cart ids via PUT /cart, POST /cart/changeNum, and DELETE...
CVE-2026-110125 waynboot-mall through 2.0.0 IDOR via Mobile Order Endpoints
Waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability that allows authenticated members to access and modify other members' orders by supplying their order identifiers. Attackers can enumerate sequential order ids or serial numbers via detail, cancel, confirm,...
CVE-2026-110125
Waynboot-mall through version 2.0.0 is susceptible to an Insecure Direct Object Reference (IDOR) vulnerability. Authenticated members can access and modify the orders of other members by supplying specific order identifiers. By enumerating sequential order IDs or serial numbers, an attacker can i...
CVE-2026-110125 waynboot-mall through 2.0.0 IDOR via Mobile Order Endpoints
Waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability that allows authenticated members to access and modify other members' orders by supplying their order identifiers. Attackers can enumerate sequential order ids or serial numbers via detail, cancel, confirm,...
Windows Mobile Broadband Elevation of Privilege Vulnerability
Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally...
Windows Mobile Device Management Tampering Vulnerability
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally...
CVE-2026-70216: Insufficient Granularity of Access Control
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally...
PT-2026-113230
Name of the Vulnerable Software and Affected Versions Windows Mobile Broadband affected versions not specified Description Incorrect permission assignment for a critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally. Recommendations At the moment...
CVE-2026-97800: Incorrect Permission Assignment for Critical Resource
Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-97800: Windows Mobile Broadband Elevation of Privilege Vulnerability
Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70216: Windows Mobile Device Management Tampering Vulnerability
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally...
WordPress Hippoo Mobile App for WooCommerce plugin <= 1.12.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by sengtocxoen in WordPress Plugin Hippoo Mobile App for WooCommerce versions = 1.12.0...