https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T18:56:19.454892+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-5241 EUVD-2026-5241 2026-10-16T18:56:19.458106+00:00 EUVD-2026-5241 https://cve.radiocsirt.org/vuln/fkie_cve-2024-32988 fkie_cve-2024-32988 2026-10-16T18:56:19.458145+00:00

'OfferBox' App for Android versions 2.0.0 to 2.3.17 and 'OfferBox' App for iOS versions 2.1.7 to 2.6.14 use a hard-coded secret key for JWT. Secret key for JWT may be retrieved if the application binary is reverse-engineered.

 https://cve.radiocsirt.org/vuln/ghsa-4fpw-6gvj-w9xf GHSA-4fpw-6gvj-w9xf 2026-10-16T18:56:19.458180+00:00

'OfferBox' App for Android versions 2.0.0 to 2.3.17 and 'OfferBox' App for iOS versions 2.1.7 to 2.6.14 use a hard-coded secret key for JWT. Secret key for JWT may be retrieved if the application binary is reverse-engineered.

 https://cve.radiocsirt.org/vuln/gsd-2024-32988 gsd-2024-32988 2026-10-16T18:56:19.458197+00:00 gsd-2024-32988 https://cve.radiocsirt.org/vuln/jvndb-2024-000045 jvndb-2024-000045 2026-10-16T18:56:19.458209+00:00

"OfferBox" App provided by i-plug inc. uses a hard-coded secret key for JWT (CWE-321). Yuta Yamate of Rakuten Group, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.