CVE-2025-2190

The mobile application com.transsnet.store has a man-in-the-middle attack vulnerability, which may lead to code injection risks...

CVE-2025-28881

Cross-Site Request Forgery CSRF vulnerability in mg12 Mobile Themes wp-mobile-themes allows Cross Site Request Forgery.This issue affects Mobile Themes: from n/a through = 1.1.1...

CVE-2025-1561 AppPresser – Mobile App Framework <= 4.4.10 - Unauthenticated Stored Cross-Site Scripting

The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in all versions up to, and including, 4.4.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2025-1561 AppPresser – Mobile App Framework <= 4.4.10 - Unauthenticated Stored Cross-Site Scripting

The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in all versions up to, and including, 4.4.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

WordPress Mobile Themes plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Mobile Themes versions = 1.1.1...

CVE-2025-28881

Cross-Site Request Forgery CSRF vulnerability in mg12 Mobile Themes wp-mobile-themes allows Cross Site Request Forgery.This issue affects Mobile Themes: from n/a through = 1.1.1...

CVE-2025-28881 WordPress Mobile Themes plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in mg12 Mobile Themes wp-mobile-themes allows Cross Site Request Forgery.This issue affects Mobile Themes: from n/a through = 1.1.1...

CVE-2025-28881

CVE-2025-28881 describes a CSRF in the WordPress Mobile Themes plugin (mg12 Mobile Themes) affecting versions up to 1.1.1. Impact: CSRF could enable unauthorized state-changing requests. CVSS v3.1 base score 4.3 (Network, Low Attack Complexity, Privileges Required: None, User Interaction: Require...

CVE-2025-28881 WordPress Mobile Themes plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in mg12 Mobile Themes wp-mobile-themes allows Cross Site Request Forgery.This issue affects Mobile Themes: from n/a through = 1.1.1...

CVE-2025-2190

The mobile application com.transsnet.store has a man-in-the-middle attack vulnerability, which may lead to code injection risks...

CVE-2025-2190

The mobile application com.transsnet.store has a man-in-the-middle attack vulnerability, which may lead to code injection risks...

CVE-2025-2190

The mobile application com.transsnet.store has a man-in-the-middle attack vulnerability, which may lead to code injection risks...

CVE-2025-2190

CVE-2025-2190 affects the mobile app com.transsnet.store. Root cause per the CVE metadata is a man‑in‑the‑middle vulnerability that may enable code injection. CVSS v3.1 vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H with base score 8.1 (HIGH). Multiple connected feeds corroborate the issue; no expli...

CVE-2025-2190

The mobile application com.transsnet.store has a man-in-the-middle attack vulnerability, which may lead to code injection risks...

WordPress plugin Mobile Themes 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2025-10703

Name of the Vulnerable Software and Affected Versions com.transsnet.store affected versions not specified Description The mobile application has a man-in-the-middle attack issue, which may lead to code injection risks. Recommendations At the moment, there is no information about a newer version...

CVE-2024-44179

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15. An attacker with physical access to a device may be able to read contact numbers from the lock screen...

How ads weirdly know your screen brightness, headphone jack use, and location, with Tim Shott (Lock and Code S06E05)

This week on the Lock and Code podcast … Something's not right in the world of location data. In January, a location data broker named Gravy Analytics was hacked, with the alleged cybercriminal behind the attack posting an enormous amount of data online as proof. Though relatively unknown to most...

CVE-2025-27509

fleetdm/fleet is an open source device management, built on osquery. In vulnerable versions of Fleet, an attacker could craft a specially-formed SAML response to forge authentication assertions, provision a new administrative user account if Just-In-Time JIT provisioning is enabled, or create new...

CVE-2024-13894

Smartwares cameras CIP-37210AT and C724IP, as well as others which share the same firmware in versions up to 3.3.0, are vulnerable to path traversal. When an affected device is connected to a mobile app, it opens a port 10000 enabling a user to download pictures shot at specific moments by...