https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 16:44:19 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-188090 EUVD-2026-188090 https://cve.radiocsirt.org/vuln/euvd-2026-188090 https://cve.radiocsirt.org/vuln/fkie_cve-2023-41387 <p>A SQL injection in the flutter_downloader component through 1.11.1 for iOS allows remote attackers to steal session tokens and overwrite arbitrary files inside the app&#39;s container. The internal database of the framework is exposed to the local user if an app uses UIFileSharingEnabled and LSSupportsOpeningDocumentsInPlace properties. As a result, local users can obtain the same attack primitives as remote attackers by tampering with the internal database of the framework on the device.</p> <p>A SQL injection in the flutter_downloader component through 1.11.1 for iOS allows remote attackers to steal session tokens and overwrite arbitrary files inside the app&#39;s container. The internal database of the framework is exposed to the local user if an app uses UIFileSharingEnabled and LSSupportsOpeningDocumentsInPlace properties. As a result, local users can obtain the same attack primitives as remote attackers by tampering with the internal database of the framework on the device.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-41387 https://cve.radiocsirt.org/vuln/ghsa-jmj6-wqfw-54vr <p>A SQL injection in the flutter_downloader component through 1.11.1 for iOS allows remote attackers to steal session tokens and overwrite arbitrary files inside the app&#39;s container. The internal database of the framework is exposed to the local user if an app uses UIFileSharingEnabled and LSSupportsOpeningDocumentsInPlace properties. As a result, local users can obtain the same attack primitives as remote attackers by tampering with the internal database of the framework on the device.</p> <p>A SQL injection in the flutter_downloader component through 1.11.1 for iOS allows remote attackers to steal session tokens and overwrite arbitrary files inside the app&#39;s container. The internal database of the framework is exposed to the local user if an app uses UIFileSharingEnabled and LSSupportsOpeningDocumentsInPlace properties. As a result, local users can obtain the same attack primitives as remote attackers by tampering with the internal database of the framework on the device.</p> https://cve.radiocsirt.org/vuln/ghsa-jmj6-wqfw-54vr https://cve.radiocsirt.org/vuln/gsd-2023-41387 gsd-2023-41387 https://cve.radiocsirt.org/vuln/gsd-2023-41387