https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:31:19 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-211096 EUVD-2026-211096 https://cve.radiocsirt.org/vuln/euvd-2026-211096 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45832 <p>Hard-coded credentials were included as part of the application binary. These credentials served as part of the application authentication flow and communication with the mobile application. An attacker could access unauthorized information.</p> <p>Hard-coded credentials were included as part of the application binary. These credentials served as part of the application authentication flow and communication with the mobile application. An attacker could access unauthorized information.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-45832 https://cve.radiocsirt.org/vuln/ghsa-jc7c-qjrv-g424 <p>Hard-coded credentials were included as part of the application binary. These credentials served as part of the application authentication flow and communication with the mobile application. An attacker could access unauthorized information.</p> <p>Hard-coded credentials were included as part of the application binary. These credentials served as part of the application authentication flow and communication with the mobile application. An attacker could access unauthorized information.</p> https://cve.radiocsirt.org/vuln/ghsa-jc7c-qjrv-g424 https://cve.radiocsirt.org/vuln/icsma-24-354-01 <p>A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An attacker could use the information to disrupt normal use of the application by changing the translation files and thus weaken the integrity of normal use. Multiple bash files were present in the application&#39;s private directory. Bash files can be used on their own, by an attacker that has already full access to the mobile platform to compromise the translations for the application. Hard-coded credentials were included as part of the application binary. These credentials served as part of the application authentication flow and communication with the mobile application. An attacker could access unauthorized information.</p> <p>A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An attacker could use the information to disrupt normal use of the application by changing the translation files and thus weaken the integrity of normal use. Multiple bash files were present in the application&#39;s private directory. Bash files can be used on their own, by an attacker that has already full access to the mobile platform to compromise the translations for the application. Hard-coded credentials were included as part of the application binary. These credentials served as part of the application authentication flow and communication with the mobile application. An attacker could access unauthorized information.</p> https://cve.radiocsirt.org/vuln/icsma-24-354-01