CVE-2026-106209

An ui misrepresentation flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/518039724...

CVE-2026-106206

An improper input validation flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517374100...

CVE-2026-106406

A missing authorization flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/505186109...

CVE-2026-106397

An incorrect authorization flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/503725788...

CVE-2026-90983

Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. Hayat Hospital Hayat Mobile allows Authentication Bypass. This issue affects Hayat Mobile: from 3.3.0 before 3.4.0...

CVE-2026-90983

The Hayat Mobile application, developed by Hayat Health Facilities Inc. (Hayat Hospital) , is vulnerable to an Authentication Bypass due to a Use of Client-Side Authentication (CWE-603) vulnerability. This flaw specifically affects versions from 3.3.0 before 3.4.0 . Exploitation of this vulnerabi...

EUVD-2026-95893

Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. Hayat Hospital Hayat Mobile allows Authentication Bypass. This issue affects Hayat Mobile: from 3.3.0 before 3.4.0...

CVE-2026-90983 OTP Code Exposure in Hayat Hospital's Hayat Mobile

Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. Hayat Hospital Hayat Mobile allows Authentication Bypass. This issue affects Hayat Mobile: from 3.3.0 before 3.4.0...

CVE-2026-90983: Use of Client-Side Authentication

Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. Hayat Hospital Hayat Mobile allows Authentication Bypass. This issue affects Hayat Mobile: from 3.3.0 before 3.4.0...

CVE-2026-107857: Cleartext Storage of Sensitive Information

Mindwtr is a free offline-first task management application for desktop and mobile. Prior to 1.1.5, the mobile application writes the Cloud sync bearer token and WebDAV password to unencrypted AsyncStorage under @mindwtrcloudtoken and @mindwtrwebdavpassword. A party with access to the application...

blackboxprotobuf

Blackbox Protobuf Blackbox Protobuf ora ha un pacchetto ufficiale su PyPi con il nomebbpb. Il pacchetto blackboxprotobuf è un fork più vecchio Descrizione Blackbox Protobuf è un insieme di strumenti per lavorare con Protocol Buffers protobuf codificati senza la definizione protobuf corrispondente...

CVE-2026-76280 Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gateway

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.72, an authenticated user who does not hold the "admin" or "scadmin" Splunk roles could modify Splunk Secure Gateway alert and mobile-device recipient data in...

CVE-2026-106408

A protection mechanism failure flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/504227656...

Linux Distros Unpatched Vulnerability : CVE-2026-106206

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-106414

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially...

Linux Distros Unpatched Vulnerability : CVE-2026-106367

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially...

Linux Distros Unpatched Vulnerability : CVE-2026-106387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive...

Linux Distros Unpatched Vulnerability : CVE-2026-106408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTM...

Linux Distros Unpatched Vulnerability : CVE-2026-106254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via a co-installed app...

Linux Distros Unpatched Vulnerability : CVE-2026-106305

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page...