https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 22:03:36 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-222621 EUVD-2026-222621 https://cve.radiocsirt.org/vuln/euvd-2026-222621 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45203 <p>Improper authorization in handler for custom URL scheme issue in &#34;@cosme&#34; App for Android versions prior 5.69.0 and &#34;@cosme&#34; App for iOS versions prior to 6.74.0 allows an attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.</p> <p>Improper authorization in handler for custom URL scheme issue in &#34;@cosme&#34; App for Android versions prior 5.69.0 and &#34;@cosme&#34; App for iOS versions prior to 6.74.0 allows an attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-45203 https://cve.radiocsirt.org/vuln/ghsa-499r-h8wp-rfvm <p>Improper authorization in handler for custom URL scheme issue in &#34;@cosme&#34; App for Android versions prior 5.69.0 and &#34;@cosme&#34; App for iOS versions prior to 6.74.0 allows an attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.</p> <p>Improper authorization in handler for custom URL scheme issue in &#34;@cosme&#34; App for Android versions prior 5.69.0 and &#34;@cosme&#34; App for iOS versions prior to 6.74.0 allows an attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.</p> https://cve.radiocsirt.org/vuln/ghsa-499r-h8wp-rfvm https://cve.radiocsirt.org/vuln/jvndb-2024-000094 <p>&#34;@cosme&#34; App provided by istyle Inc. provides the function to access a requested URL using Custom URL Scheme. The App does not restrict access to the function properly (CWE-939) which may be exploited to direct the App to access any sites. Pantuhong Sorasiri of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>&#34;@cosme&#34; App provided by istyle Inc. provides the function to access a requested URL using Custom URL Scheme. The App does not restrict access to the function properly (CWE-939) which may be exploited to direct the App to access any sites. Pantuhong Sorasiri of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2024-000094