20402 matches found
CVE-2025-0590
CVE-2025-0590 affects the TECNO/Transsion Carlcare mobile app. The root cause is improper permission settings that may cause information leakage (CVE-2025-0590; CVSS 3.1: 7.5 HIGH, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). Exploitation details are not provided in the documents; remediation/fixes are ...
TECNO com.transsion.carlcare 安全漏洞
TECNO com.transsion.carlcare is a mobile application from Transsion TECNO China. A security vulnerability exists in TECNO com.transsion.carlcare version 6.2.8.1, which originates from improper privilege settings and can lead to information disclosure...
CVE-2024-54681
Multiple bash files were present in the application's private directory. Bash files can be used on their own, by an attacker that has already full access to the mobile platform to compromise the translations for the application...
CVE-2024-45832 Ossur Mobile Logic Application Use of Hard-coded Credentials
Hard-coded credentials were included as part of the application binary. These credentials served as part of the application authentication flow and communication with the mobile application. An attacker could access unauthorized information...
CVE-2024-54681 Ossur Mobile Logic Application Command Injection
Multiple bash files were present in the application's private directory. Bash files can be used on their own, by an attacker that has already full access to the mobile platform to compromise the translations for the application...
CVE-2024-54681 Ossur Mobile Logic Application Command Injection
Multiple bash files were present in the application's private directory. Bash files can be used on their own, by an attacker that has already full access to the mobile platform to compromise the translations for the application...
CVE-2024-54681
CVE-2024-54681 affects Ossur Mobile Logic Application. Connected sources confirm the root cause is the presence of multiple bash files in the application’s private directory, which an attacker with full access on the mobile platform can use to compromise translations. Public mentions (e.g., Red H...
CVE-2024-53683 Ossur Mobile Logic Application Exposure of Sensitive System Information to an Unauthorized Control Sphere
A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An attacker could use the information to disrupt normal use of the application by changing the translation files and thus weaken the integrity of normal use...
CVE-2024-53683 Ossur Mobile Logic Application Exposure of Sensitive System Information to an Unauthorized Control Sphere
A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An attacker could use the information to disrupt normal use of the application by changing the translation files and thus weaken the integrity of normal use...
Ossur Mobile Logic Application 命令注入漏洞
Ossur Mobile Logic Application is an intelligent application for bionic prosthetics from Ossur. A command injection vulnerability exists in Ossur Mobile Logic Application versions prior to 1.5.5, which stems from the presence of multiple bash files in the application's private directory, which ca...
Ossur Mobile Logic Application 信任管理问题漏洞
Ossur Mobile Logic Application is an intelligent application for bionic prosthetics from Ossur. A trust management issue vulnerability exists in Ossur Mobile Logic Application versions prior to 1.5.5, which stems from hard-coded credentials being included in the application binary, allowing an...
Ossur Mobile Logic Application 安全漏洞
Ossur Mobile Logic Application is an intelligent application for bionic prosthetics from Ossur. A security vulnerability exists in Ossur Mobile Logic Application versions prior to 1.5.5 that originates from exposing sensitive system information to unauthorized control...
CVE-2025-20630
Mattermost Mobile versions =2.22.0 fail to properly handle posts with attachments containing fields that cannot be cast to a String, which allows an attacker to cause the mobile to crash via creating and sending such a post to a channel...
CVE-2025-20630 Mobile crash via object that can't be cast to String in Attachment Field
Mattermost Mobile versions =2.22.0 fail to properly handle posts with attachments containing fields that cannot be cast to a String, which allows an attacker to cause the mobile to crash via creating and sending such a post to a channel...
CVE-2025-20630 Mobile crash via object that can't be cast to String in Attachment Field
Mattermost Mobile versions =2.22.0 fail to properly handle posts with attachments containing fields that cannot be cast to a String, which allows an attacker to cause the mobile to crash via creating and sending such a post to a channel...
CVE-2025-20630
Mattermost Mobile versions
CVE-2025-20630 Mobile crash via object that can't be cast to String in Attachment Field
Mattermost Mobile versions =2.22.0 fail to properly handle posts with attachments containing fields that cannot be cast to a String, which allows an attacker to cause the mobile to crash via creating and sending such a post to a channel...
CVE-2025-20072
Mattermost Mobile versions = 2.22.0 fail to properly validate the style of proto supplied to an action's style in post.props.attachments, which allows an attacker to crash the mobile via crafted malicious input...
CVE-2025-20072 Mobile crash via improper validation of proto style in attachments
Mattermost Mobile versions = 2.22.0 fail to properly validate the style of proto supplied to an action's style in post.props.attachments, which allows an attacker to crash the mobile via crafted malicious input...