https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 04:12:53 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-211213 EUVD-2026-211213 https://cve.radiocsirt.org/vuln/euvd-2026-211213 https://cve.radiocsirt.org/vuln/fkie_cve-2024-53683 <p>A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An attacker could use the information to disrupt normal use of the application by changing the translation files and thus weaken the integrity of normal use.</p> <p>A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An attacker could use the information to disrupt normal use of the application by changing the translation files and thus weaken the integrity of normal use.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-53683 https://cve.radiocsirt.org/vuln/ghsa-vq45-v67f-g42p <p>A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An attacker could use the information to disrupt normal use of the application by changing the translation files and thus weaken the integrity of normal use.</p> <p>A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An attacker could use the information to disrupt normal use of the application by changing the translation files and thus weaken the integrity of normal use.</p> https://cve.radiocsirt.org/vuln/ghsa-vq45-v67f-g42p https://cve.radiocsirt.org/vuln/icsma-24-354-01 <p>A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An attacker could use the information to disrupt normal use of the application by changing the translation files and thus weaken the integrity of normal use. Multiple bash files were present in the application&#39;s private directory. Bash files can be used on their own, by an attacker that has already full access to the mobile platform to compromise the translations for the application. Hard-coded credentials were included as part of the application binary. These credentials served as part of the application authentication flow and communication with the mobile application. An attacker could access unauthorized information.</p> <p>A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An attacker could use the information to disrupt normal use of the application by changing the translation files and thus weaken the integrity of normal use. Multiple bash files were present in the application&#39;s private directory. Bash files can be used on their own, by an attacker that has already full access to the mobile platform to compromise the translations for the application. Hard-coded credentials were included as part of the application binary. These credentials served as part of the application authentication flow and communication with the mobile application. An attacker could access unauthorized information.</p> https://cve.radiocsirt.org/vuln/icsma-24-354-01