Lucene search
+L

20648 matches found

ATTACKERKB
ATTACKERKB
added 2026/05/21 8:22 a.m.17 views

CVE-2026-22880

Mattermost Mobile Apps versions =2.37 11.4 2.0.37 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to properly validate the SSO authentication callback origin which allows an attacker controlling a malicious Mattermost server to steal user credentials for a legitimate Mattermost server via relaying the SSO...

6.1CVSS5.9AI score0.00117EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/21 8:22 a.m.12 views

CVE-2026-22880 Mobile SSO authentication flow allows credential theft via malicious server

Mattermost Mobile Apps versions =2.37 11.4 2.0.37 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to properly validate the SSO authentication callback origin which allows an attacker controlling a malicious Mattermost server to steal user credentials for a legitimate Mattermost server via relaying the SSO...

6.1CVSS5.9AI score0.00117EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/21 8:22 a.m.58 views

CVE-2026-22880 Mobile SSO authentication flow allows credential theft via malicious server

Mattermost Mobile Apps versions =2.37 11.4 2.0.37 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to properly validate the SSO authentication callback origin which allows an attacker controlling a malicious Mattermost server to steal user credentials for a legitimate Mattermost server via relaying the SSO...

6.1CVSS0.00117EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/21 8:22 a.m.45 views

CVE-2026-22880

Mattermost Mobile Apps (versions

6.1CVSS5.9AI score0.00117EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2026/05/21 12:00 a.m.22 views

TEİAŞ Mobile Application 安全漏洞

TEİAŞ Mobile Application is a mobile application developed by the Turkish company TEİAŞ, which provides information and services related to power transmission operations. Versions of the TEİAŞ Mobile Application from 1.6.2 to 1.13 contained security vulnerabilities. These vulnerabilities were due...

6.3CVSS5.8AI score0.00184EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/21 12:00 a.m.39 views

PT-2026-42475

Name of the Vulnerable Software and Affected Versions Turkiye Electricity Transmission Corporation TEİAŞ Mobile Application versions 1.6.2 through 1.12 Description Improper restriction of excessive authentication attempts allows for Brute Force attacks, which can lead to an OTP One-Time Password...

6.3CVSS5.9AI score0.00184EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/21 12:00 a.m.18 views

tickets 信任管理问题漏洞

Tickets is an open-source public safety scheduling and tracking application developed by Open ISES. Versions of tickets prior to 3.44.2 contained a vulnerability related to trust management. This vulnerability stemmed from the disabling of TLS certificate verification in the file...

8.2CVSS5.8AI score0.00173EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/21 12:00 a.m.18 views

TEİAŞ Mobile Application 代码问题漏洞

TEİAŞ Mobile Application is a mobile application developed by the Turkish company TEİAŞ, which provides information and services related to power transmission operations. Versions of the TEİAŞ Mobile Application from 1.6.2 to 1.13 had code vulnerabilities. These vulnerabilities were caused by...

5.7CVSS5.9AI score0.00178EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/21 12:00 a.m.21 views

tickets SQL注入漏洞

Tickets is an open-source public safety scheduling and tracking application developed by Open ISES. Versions of tickets prior to 3.44.2 contained a SQL injection vulnerability. This vulnerability stemmed from the direct concatenation of the id GET parameter in the ajax/mobilemain.php file into th...

7.1CVSS5.9AI score0.00214EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/21 12:00 a.m.24 views

Mattermost Mobile Apps 跨站请求伪造漏洞

Mattermost Mobile Apps is a messaging mobile application developed by the American company Mattermost. Versions of Mattermost Mobile Apps prior to 2.0.37, 11.0.4 and earlier, 11.1.3 and earlier, 11.3.2 and earlier, as well as 10.11.11.0 and earlier, contain a cross-site request forgeing...

6.1CVSS5.7AI score0.00117EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/21 12:00 a.m.40 views

PT-2026-42474

Name of the Vulnerable Software and Affected Versions Turkiye Electricity Transmission Corporation TEİAŞ Mobile Application versions 1.6.2 through 1.12 Description Insufficient session expiration in the application allows for session hijacking, a process where an attacker takes over a user's acti...

5.7CVSS5.9AI score0.00178EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/21 12:00 a.m.24 views

PT-2026-42527

Open ISES Tickets before 3.44.2 disables TLS certificate verification in rm/incs/mobile login.inc.php by setting CURLOPT SSL VERIFYPEER to false and not setting CURLOPT SSL VERIFYHOST when issuing outbound HTTPS requests for outbound HTTPS requests issued during the mobile RouteMate login flow. A...

8.2CVSS5.9AI score0.00173EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/21 12:00 a.m.31 views

PT-2026-42432

Name of the Vulnerable Software and Affected Versions Mattermost Mobile Apps versions prior to 2.38 Description The application fails to properly validate the SSO authentication callback origin. This allows an attacker who controls a malicious Mattermost server to steal user credentials for a...

6.1CVSS6.4AI score0.00117EPSS
SaveExploits0References7
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.7 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: pcigeneric: Remove the WQMEMRECLAIM flag from the state workqueue. A recent change created a dedicated workqueue for the state-change work, with WQHIGHPRI and WQMEMRECLAIM flags. However, the state-change work...

5.5CVSS5.8AI score0.00222EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/19 2:27 p.m.12 views

CVE-2026-8706

Firefox for iOS hosted Reader mode on an unauthenticated local web server, allowing another application on the same device to request arbitrary URLs and receive the response rendered with the signed-in user's cookies. This vulnerability was fixed in Firefox for iOS 151.0...

6.5CVSS5.9AI score0.00192EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/19 12:00 a.m.19 views

Malicious code in @antv/g-mobile (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:00 a.m.14 views

MAL-2026-3925 Malicious code in @antv/g-mobile-canvas (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:00 a.m.18 views

MAL-2026-3924 Malicious code in @antv/g-mobile (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:00 a.m.19 views

MAL-2026-3990 Malicious code in @antv/g6-mobile (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/19 12:00 a.m.27 views

ZTE MU5250 信息泄露漏洞

The ZTE MU5250 is a 5G mobile Wi-Fi device produced by ZTE Corporation. The ZTE MU5250 has a vulnerability related to information leakage, which stems from improper control of web interface permissions. Unauthorized attackers can modify the configuration through these interfaces...

6.3CVSS5.8AI score0.00252EPSS
SaveExploits0References1
Rows per page
Query Builder