Lucene search
+L

20652 matches found

CNNVD
CNNVD
added 2026/01/05 12:00 a.m.19 views

SAMSUNG多款产品 安全漏洞

SAMSUNG Mobile Processor and others are products of the South Korean company SAMSUNG.SAMSUNG Mobile Processor is a series of mobile processors.SAMSUNG Wearable Processor is a series of wearable processors.SAMSUNG Exynos 1380 is SAMSUNG Exynos 1380 is a cell phone chip processor. A security...

5.9CVSS6.6AI score0.00167EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/01/05 12:00 a.m.15 views

SAMSUNG多款产品 安全漏洞

SAMSUNG Wearable Processor and others are products of the South Korean company Samsung.SAMSUNG Wearable Processor is a series of wearable processors.SAMSUNG Exynos 990 is a mobile processor.SAMSUNG Exynos 850 is a mobile processor. SAMSUNG Exynos 850 is a mobile processor. A security vulnerabilit...

7.5CVSS6.5AI score0.00323EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/01/05 12:00 a.m.15 views

SAMSUNG Mobile Processor 安全漏洞

SAMSUNG Mobile Processor is a family of mobile processors from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile Processor that stems from improper handling of NL80211 vendor commands, which could result in a buffer overflow during processing of IOCTL messages. The following...

8.4CVSS7.1AI score0.00156EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/01/05 12:00 a.m.16 views

SAMSUNG多款产品 安全漏洞

SAMSUNG Mobile Processor and others are products of the South Korean company SAMSUNG.SAMSUNG Mobile Processor is a series of mobile processors.SAMSUNG Wearable Processor is a series of wearable processors.SAMSUNG Exynos 1380 is SAMSUNG Exynos 1380 is a cell phone chip processor. A security...

6.2CVSS6.4AI score0.0013EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/01 6:25 a.m.25 views

CVE-2025-13029

The Knowband Mobile App Builder WordPress plugin before 3.0.0 does not have authorisation when deleting users via its REST API, allowing unauthenticated attackers to delete arbitrary users...

7.5CVSS7AI score0.00242EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/31 8:09 p.m.6 views

CVE-2025-50053 WordPress Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App Plugin <= 0.8.8.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nebelhorn Blappsta Mobile App Plugin & Your native, mobile iPhone App and Android App allows Reflected XSS.This issue affects Blappsta Mobile App Plugin Your native, mobile iPhone App and Android...

7.1CVSS6AI score0.00174EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/12/31 8:09 p.m.7 views

CVE-2025-50053

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nebelhorn Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App yournewsapp allows Reflected XSS.This issue affects Blappsta Mobile App Plugin – Your native, mobile iPhone App...

7.1CVSS5.2AI score0.00174EPSS
SaveExploits0References4
CVE
CVE
added 2025/12/31 8:09 p.m.39 views

CVE-2025-50053

CVE-2025-50053 affects the WordPress Blappsta Mobile App Plugin and related native mobile apps (iPhone/Android) up to version 0.8.8.8. The issue is a Reflected Cross-Site Scripting (XSS) flaw caused by improper input neutralization during web page generation, enabling injected scripts in pages vi...

7.1CVSS5.2AI score0.00174EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/12/31 6:31 p.m.298 views

Exploit for CVE-2025-68860

CVE-2025-68860 WordPress Mobile builder Plugin = 1.4.2 is...

9.8CVSS7.5AI score0.00546EPSS
SaveExploits1
Patchstack
Patchstack
added 2025/12/31 7:23 a.m.15 views

WordPress Knowband Mobile App Builder for wooCommerce plugin < 3.0.0 - Unauthenticated Arbitrary User Deletion vulnerability

Unauthenticated Arbitrary User Deletion vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin Knowband Mobile App Builder versions 3.0.0...

7.5CVSS6.7AI score0.00242EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/31 6:00 a.m.6 views

CVE-2025-13029 Knowband Mobile App Builder for wooCommerce < 3.0.0 – Unauthenticated Arbitrary User Deletion

The Knowband Mobile App Builder WordPress plugin before 3.0.0 does not have authorisation when deleting users via its REST API, allowing unauthenticated attackers to delete arbitrary users...

6.6AI score0.00242EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/31 6:00 a.m.30 views

CVE-2025-13029

CVE-2025-13029 concerns the Knowband Mobile App Builder for WordPress (WooCommerce) before version 3.0.0. The issue is a lack of authorization on the REST API endpoint used to delete users, allowing unauthenticated attackers to delete arbitrary users. Publicly disclosed details across multiple co...

7.5CVSS6.6AI score0.00242EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/31 12:31 a.m.15 views

EUVD-2023-60533

NLB mKlik Macedonia 3.3.12 contains a SQL injection vulnerability in international transfer parameters that allows attackers to manipulate database queries. Attackers can inject arbitrary SQL code through unsanitized input to potentially disclose sensitive information from the mobile banking...

8.8CVSS7.3AI score0.00335EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.14 views

PT-2025-54448

Name of the Vulnerable Software and Affected Versions nebelhorn Blappsta Mobile App Plugin & Your native, mobile iPhone App and Android App versions through 0.8.8.8 Description The software contains a flaw related to improper input handling during web page generation, leading to a Reflected...

7.1CVSS6.4AI score0.00174EPSS
SaveExploits0References4
NVD
NVD
added 2025/12/30 11:15 p.m.15 views

CVE-2023-54163

NLB mKlik Macedonia 3.3.12 contains a SQL injection vulnerability in international transfer parameters that allows attackers to manipulate database queries. Attackers can inject arbitrary SQL code through unsanitized input to potentially disclose sensitive information from the mobile banking...

8.8CVSS0.00335EPSS
SaveExploits1References5
CVE
CVE
added 2025/12/30 10:41 p.m.37 views

CVE-2023-54163

CVE-2023-54163 affects NLB mKlik Macedonia 3.3.12, where a SQL injection vulnerability exists in the international transfer parameters. The root cause is unsanitized input allowing arbitrary SQL execution, potentially exposing sensitive data from the mobile banking application. The CVSSv3.1 vecto...

8.8CVSS7.4AI score0.00335EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/30 10:41 p.m.4 views

CVE-2023-54163 NLB mKlik Macedonia 3.3.12 SQL Injection via International Transfer Parameters

NLB mKlik Macedonia 3.3.12 contains a SQL injection vulnerability in international transfer parameters that allows attackers to manipulate database queries. Attackers can inject arbitrary SQL code through unsanitized input to potentially disclose sensitive information from the mobile banking...

8.8CVSS7.4AI score0.00335EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/12/30 10:41 p.m.42 views

CVE-2023-54163 NLB mKlik Macedonia 3.3.12 SQL Injection via International Transfer Parameters

NLB mKlik Macedonia 3.3.12 contains a SQL injection vulnerability in international transfer parameters that allows attackers to manipulate database queries. Attackers can inject arbitrary SQL code through unsanitized input to potentially disclose sensitive information from the mobile banking...

8.8CVSS0.00335EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/12/30 9:09 p.m.11 views

CVE-2025-68860

Authentication Bypass Using an Alternate Path or Channel vulnerability in Mobile Builder Mobile builder mobile-builder allows Authentication Abuse.This issue affects Mobile builder: from n/a through = 1.4.2...

9.8CVSS5.9AI score0.00546EPSS
SaveExploits1References1
Snyk
Snyk
added 2025/12/30 5:15 p.m.7 views

Malicious Package

Overview ro-mobile is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS6.8AI score
SaveExploits0References2
Rows per page
Query Builder