https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 19:58:41 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-242834 EUVD-2026-242834 https://cve.radiocsirt.org/vuln/euvd-2026-242834 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23388 <p>Improper authorization in handler for custom URL scheme issue in &#34;Mercari&#34; App for Android prior to version 5.78.0 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.</p> <p>Improper authorization in handler for custom URL scheme issue in &#34;Mercari&#34; App for Android prior to version 5.78.0 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-23388 https://cve.radiocsirt.org/vuln/ghsa-xx65-34vr-mqrj <p>Improper authorization in handler for custom URL scheme issue in &#34;Mercari&#34; App for Android prior to version 5.78.0 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.</p> <p>Improper authorization in handler for custom URL scheme issue in &#34;Mercari&#34; App for Android prior to version 5.78.0 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.</p> https://cve.radiocsirt.org/vuln/ghsa-xx65-34vr-mqrj https://cve.radiocsirt.org/vuln/gsd-2024-23388 gsd-2024-23388 https://cve.radiocsirt.org/vuln/gsd-2024-23388 https://cve.radiocsirt.org/vuln/jvndb-2024-000005 <p>&#34;Mercari&#34; App for Android by Mercari, Inc. provides the function to access a requested URL using Custom URL Scheme. The App does not restrict access to the function properly (CWE-939) which may be exploited to direct the App to access any sites. Shiga Takuma of BroadBand Security Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>&#34;Mercari&#34; App for Android by Mercari, Inc. provides the function to access a requested URL using Custom URL Scheme. The App does not restrict access to the function properly (CWE-939) which may be exploited to direct the App to access any sites. Shiga Takuma of BroadBand Security Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2024-000005