https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T15:08:15.793586+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-252056 EUVD-2026-252056 2026-10-06T15:08:15.865391+00:00 EUVD-2026-252056 https://cve.radiocsirt.org/vuln/fkie_cve-2025-41408 fkie_cve-2025-41408 2026-10-06T15:08:15.865437+00:00

Improper authorization in handler for custom URL scheme issue in "Yahoo! Shopping" App for Android versions prior to 14.15.0 allows a remote unauthenticated attacker may lead a user to access an arbitrary website on the vulnerable App. As a result, the user may become a victim of a phishing attack.

 https://cve.radiocsirt.org/vuln/ghsa-h642-mphj-q5v4 GHSA-h642-mphj-q5v4 2026-10-06T15:08:15.865483+00:00

Improper authorization in handler for custom URL scheme issue in "Yahoo! Shopping" App for Android versions prior to 14.15.0 allows a remote unauthenticated attacker may lead a user to access an arbitrary website on the vulnerable App. As a result, the user may become a victim of a phishing attack.

 https://cve.radiocsirt.org/vuln/jvndb-2025-000071 jvndb-2025-000071 2026-10-06T15:08:15.865508+00:00

"Yahoo! Shopping" App for Android provided by LY Corporation contains the following vulnerability.<ul><li>Improper authorization in handler for custom URL scheme (CWE-939) - CVE-2025-41408</li></ul>Shiga Takuma of BroadBand Security, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.