https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T15:39:43.514030+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-191359 EUVD-2026-191359 2026-10-06T15:39:43.517311+00:00 EUVD-2026-191359 https://cve.radiocsirt.org/vuln/fkie_cve-2023-40530 fkie_cve-2023-40530 2026-10-06T15:39:43.517348+00:00

Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device.

 https://cve.radiocsirt.org/vuln/ghsa-prv9-x3jf-3mm9 GHSA-prv9-x3jf-3mm9 2026-10-06T15:39:43.517391+00:00

Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device.

 https://cve.radiocsirt.org/vuln/gsd-2023-40530 gsd-2023-40530 2026-10-06T15:39:43.517420+00:00 gsd-2023-40530 https://cve.radiocsirt.org/vuln/jvndb-2023-000085 jvndb-2023-000085 2026-10-06T15:39:43.517439+00:00

"Skylark" App provided by SKYLARK HOLDINGS CO., LTD. provides the function to access a requested URL using Custom URL Scheme. The App does not restrict access to the function properly (CWE-939, CVE-2023-40530, CVE-2024-54014) which may be exploited to direct the App to access any sites. CVE-2023-40530 Shunsuke Kaneko of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2024-54014 Ryo Sato reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.