https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T11:29:12.288488+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-238230 EUVD-2026-238230 2026-10-07T11:29:12.291732+00:00 EUVD-2026-238230 https://cve.radiocsirt.org/vuln/fkie_cve-2022-41797 fkie_cve-2022-41797 2026-10-07T11:29:12.291767+00:00

Improper authorization in handler for custom URL scheme vulnerability in Lemon8 App for Android versions prior to 3.3.5 and Lemon8 App for iOS versions prior to 3.3.5 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.

 https://cve.radiocsirt.org/vuln/ghsa-9phr-845q-6wwg GHSA-9phr-845q-6wwg 2026-10-07T11:29:12.291799+00:00

Improper authorization in handler for custom URL scheme vulnerability in Lemon8 App for Android versions prior to 3.3.5 and Lemon8 App for iOS versions prior to 3.3.5 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.

 https://cve.radiocsirt.org/vuln/gsd-2022-41797 gsd-2022-41797 2026-10-07T11:29:12.291816+00:00 gsd-2022-41797 https://cve.radiocsirt.org/vuln/jvndb-2022-000081 jvndb-2022-000081 2026-10-07T11:29:12.291827+00:00

Lemon8 by ByteDance K.K. provides the function to access a requested URL using Custom URL Scheme/DeepLink. The App does not restrict access to the function properly (CWE-939) which may be exploited to direct the App to access any sites. Ryo Sato of BroadBand Security,Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.