https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 02:34:17 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-5732 EUVD-2026-5732 https://cve.radiocsirt.org/vuln/euvd-2026-5732 https://cve.radiocsirt.org/vuln/fkie_cve-2024-36279 <p>Reliance on obfuscation or encryption of security-relevant inputs without integrity checking issue exists in &#34;FreeFrom - the nostr client&#34; App versions prior to 1.3.5 for Android and iOS. If this vulnerability is exploited, the content of direct messages (DMs) between users may be manipulated by a man-in-the-middle attack.</p> <p>Reliance on obfuscation or encryption of security-relevant inputs without integrity checking issue exists in &#34;FreeFrom - the nostr client&#34; App versions prior to 1.3.5 for Android and iOS. If this vulnerability is exploited, the content of direct messages (DMs) between users may be manipulated by a man-in-the-middle attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-36279 https://cve.radiocsirt.org/vuln/ghsa-f62c-6722-rv46 <p>Reliance on obfuscation or encryption of security-relevant inputs without integrity checking issue exists in &#34;FreeFrom - the nostr client&#34; App versions prior to 1.3.5 for Android and iOS. If this vulnerability is exploited, the content of direct messages (DMs) between users may be manipulated by a man-in-the-middle attack.</p> <p>Reliance on obfuscation or encryption of security-relevant inputs without integrity checking issue exists in &#34;FreeFrom - the nostr client&#34; App versions prior to 1.3.5 for Android and iOS. If this vulnerability is exploited, the content of direct messages (DMs) between users may be manipulated by a man-in-the-middle attack.</p> https://cve.radiocsirt.org/vuln/ghsa-f62c-6722-rv46 https://cve.radiocsirt.org/vuln/jvndb-2024-000060 <p>&#34;FreeFrom - the nostr client&#34; App provided by FreeFrom K.K. contains multiple vulnerabilities listed below. &lt;ul&gt;&lt;li&gt;Improper verification of cryptographic signature (CWE-347) - CVE-2024-36277&lt;/li&gt; &lt;li&gt;Reliance on obfuscation or encryption of security-relevant inputs without integrity checking (CWE-649) - CVE-2024-36279&lt;/li&gt; &lt;li&gt;Reusing a nonce, key pair in encryption (CWE-323) - CVE-2024-36289&lt;/li&gt;&lt;/ul&gt; The people listed below reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Hayato Kimura of University of Hyogo Ryoma Ito of National Institute of Information and Communications Technology (NICT) Kazuhiko Minematsu of NEC Corporation/Yokohama National University Takanori Isobe of University of Hyogo</p> <p>&#34;FreeFrom - the nostr client&#34; App provided by FreeFrom K.K. contains multiple vulnerabilities listed below. &lt;ul&gt;&lt;li&gt;Improper verification of cryptographic signature (CWE-347) - CVE-2024-36277&lt;/li&gt; &lt;li&gt;Reliance on obfuscation or encryption of security-relevant inputs without integrity checking (CWE-649) - CVE-2024-36279&lt;/li&gt; &lt;li&gt;Reusing a nonce, key pair in encryption (CWE-323) - CVE-2024-36289&lt;/li&gt;&lt;/ul&gt; The people listed below reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Hayato Kimura of University of Hyogo Ryoma Ito of National Institute of Information and Communications Technology (NICT) Kazuhiko Minematsu of NEC Corporation/Yokohama National University Takanori Isobe of University of Hyogo</p> https://cve.radiocsirt.org/vuln/jvndb-2024-000060