91 matches found
CVE-2026-102666 Joyland AI hard-coded credentials for push notifications
The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to access the GeTui REST API and send push notifications containing arbitrary content to any user, group of users, or all users of the app at once...
EUVD-2026-91023
The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to access the GeTui REST API and send push notifications containing arbitrary content to any user, group of users, or all users of the app at once...
CVE-2026-102666: Use of Hard-coded Credentials
The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to access the GeTui REST API and send push notifications containing arbitrary content to any user, group of users, or all users of the app at once...
PT-2026-103981
Name of the Vulnerable Software and Affected Versions Joyland AI affected versions not specified Description The application contains hard-coded credentials for the GeTui push notification service. This allows an attacker to access the GeTui REST API and send push notifications with arbitrary...
CVE-2026-46371
Fleet is an open-source device management platform built on osquery. In versions up to and including 4.84.1, the Apple MDM commands listing endpoint GET /api/v1/fleet/mdm/apple/commands allowed an authenticated user with the lowest-privilege Observer role to extract sensitive values from joined...
The vulnerability of the Windows Push Notification Service allows a perpetrator to disclose protected information on Windows operating systems.
The vulnerability of the Windows Push Notification Service in operating systems related to Windows is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...
GHSA-PP89-732F-3G8Q OpenAM has Unsafe Java Deserialization via SNS
Summary Description A Deserialization of Untrusted Data CWE-502 issue exists in OpenAM's Push Notification SNS callback resource. The REST route that handles SNS push messages is mounted with anonymous access and, when a supplied message identifier has expired from the in-memory dispatcher, falls...
The vulnerability of the Windows Push Notifications service allows a perpetrator to disclose protected information.
The vulnerability of the Microsoft Graphics component in the Windows operating system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to disclose protected information...
EUVD-2020-12022
Malware in sbrugna...
EUVD-2020-11913
Malware in sbrugna...
EUVD-2020-11902
Malware in sbrugna...
EUVD-2020-11912
Malware in sbrugna...
EUVD-2020-2408
Malware in sbrugna...
EUVD-2020-21111
Malware in sbrugna...
EUVD-2020-12263
Malware in sbrugna...
EUVD-2020-11897
Malware in sbrugna...
The vulnerability of the Windows Push Notification Service allows a perpetrator to escalate their privileges on Windows operating systems.
The vulnerability of the Windows Push Notification Service is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...
CVE-2020-1387
An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'...
CVE-2020-1137
An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'...
CVE-2020-1017
An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940, CVE-2020-1001, CVE-2020-1006...