PT-2025-6409 · Ankidroid · Ankidroid

Name of the Vulnerable Software and Affected Versions: AnkiDroid version 2.17.6 Description: The issue in the AnkiDroid Android application allows attackers to retrieve internal files from the /data/data/com.ichi2.anki/ directory and save them into publicly available storage. Recommendations: For...

Code injection

Speckle Server provides server, frontend, 3D viewer, and other JavaScript utilities for the Speckle 3D data platform. A vulnerability in versions prior to 2.17.6 affects users who: authorized an application which requested a 'token write' scope or, using frontend-2, created a Personal Access Toke...

Speckle Security Breach

Speckle is an open source digital infrastructure from Speckle, Inc. A security vulnerability exists in Speckle Server versions prior to 2.17.6 that stems from Speckle Server not verifying that additional permissions granted to a new token exceed the permissions of the requesting token, which coul...