https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T04:20:05.158185+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-206045 EUVD-2026-206045 2026-10-06T04:20:05.221966+00:00 EUVD-2026-206045 https://cve.radiocsirt.org/vuln/fkie_cve-2024-54014 fkie_cve-2024-54014 2026-10-06T04:20:05.222003+00:00

Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead the application to access an arbitrary web site via another application installed on the user's device.

 https://cve.radiocsirt.org/vuln/ghsa-mqq8-fjx9-9qg8 GHSA-mqq8-fjx9-9qg8 2026-10-06T04:20:05.222038+00:00

Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead the application to access an arbitrary web site via another application installed on the user's device.

 https://cve.radiocsirt.org/vuln/jvndb-2023-000085 jvndb-2023-000085 2026-10-06T04:20:05.222056+00:00

"Skylark" App provided by SKYLARK HOLDINGS CO., LTD. provides the function to access a requested URL using Custom URL Scheme. The App does not restrict access to the function properly (CWE-939, CVE-2023-40530, CVE-2024-54014) which may be exploited to direct the App to access any sites. CVE-2023-40530 Shunsuke Kaneko of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2024-54014 Ryo Sato reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.