opensecurity kayıtları
opensecurity üreticisine ait 18 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %94,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-918 Server-Side Request Forgery (SSRF)4
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-276 Incorrect Default Permissions1
- CWE-409 Improper Handling of Highly Compressed Data (Data Amplification)1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
18 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-43399İstismar yok | Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Filesopensecurity · mobile security framework · CWE-23 | Kritik9,8 | — | %1,0 | 19 Ağu 2024 |
39İzleyin | CVE-2025-31116İstismar yok | Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebindingopensecurity · mobile security framework · CWE-918 | Kritik9,8 | — | %0,5 | 31 Mar 2025 |
34İzleyin | CVE-2025-24805İstismar yok | Local Privilege Escalation in MobSFopensecurity · mobile security framework · CWE-269 | Yüksek8,5 | — | %0,4 | 5 Şub 2025 |
34İzleyin | CVE-2025-46335İstismar yok | Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Uploadopensecurity · mobile security framework · CWE-79 | Yüksek8,6 | — | %0,3 | 5 May 2025 |
33İzleyin | CVE-2025-24803İstismar yok | Stored Cross-Site Scripting (XSS) in MobSFopensecurity · mobile security framework · CWE-79 | Yüksek8,4 | — | %0,4 | 5 Şub 2025 |
30İzleyin | CVE-2022-41547İstismar yok | Mobile Security Framework (MobSF) v0.9.2 and below was discovered to contain a local file inclusion (LFI) vulnerability in the StaticAnalyzeopensecurity · mobile security framework · CWE-98 | Yüksek7,5 | — | %1,3 | 18 Eki 2022 |
30İzleyin | CVE-2023-42261İstismar yok | Mobile Security Framework (MobSF) <=v3.7.8 Beta is vulnerable to Insecure Permissions.opensecurity · mobile security framework · CWE-276 | Yüksek7,5 | — | %0,9 | 21 Eyl 2023 |
30İzleyin | CVE-2024-29190İstismar yok | MobSF SSRF Vulnerability on assetlinks_check(act_name, well_knowns)opensecurity · mobile security framework · CWE-918 | Yüksek7,5 | — | %0,7 | 22 Mar 2024 |
30İzleyin | CVE-2024-54000İstismar yok | Mobile Security Framework (MobSF) bypass of SSRF fixopensecurity · mobile security framework · CWE-918 | Yüksek7,5 | — | %0,4 | 3 Ara 2024 |
26İzleyin | CVE-2025-58162İstismar yok | MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extractionopensecurity · mobile security framework · CWE-22 | Orta6,5 | — | %0,6 | 1 Eyl 2025 |
26İzleyin | CVE-2025-46730İstismar yok | Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attackopensecurity · mobile security framework · CWE-409 | Orta6,5 | — | %0,5 | 5 May 2025 |
26İzleyin | CVE-2026-33545İstismar yok | MobSF has SQL Injection in its SQLite Database Viewer Utilsopensecurity · mobile security framework · CWE-89 | Orta6,5 | — | %0,4 | 26 Mar 2026 |
21İzleyin | CVE-2024-41955Kavram kanıtı | Mobile Security Framework (MobSF) has an Open Redirect in Login Redirectopensecurity · mobile security framework · CWE-601 | Orta5,4 | — | %1,0 | 31 Tem 2024 |
21İzleyin | CVE-2024-53999İstismar yok | Mobile Security Framework (MobSF) Stored Cross-Site Scripting Vulnerability in "Diff or Compare" Functionalityopensecurity · mobile security framework · CWE-79 | Orta5,4 | — | %0,5 | 3 Ara 2024 |
19İzleyin | CVE-2025-24804İstismar yok | Partial Denial of Service (DoS) in MobSFopensecurity · mobile security framework · CWE-1287 | Orta4,8 | — | %0,5 | 5 Şub 2025 |
19İzleyin | CVE-2026-24490İstismar yok | MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Fieldopensecurity · mobile security framework · CWE-79 | Orta4,8 | — | %0,4 | 26 Oca 2026 |
17İzleyin | CVE-2024-31215İstismar yok | Mobile Security Framework (MobSF) vulnerable to Server-Side Request Forgery (SSRF) in firebase database checkopensecurity · mobile security framework · CWE-918 | Orta4,3 | — | %0,5 | 4 Nis 2024 |
5İzleyin | CVE-2025-58161İstismar yok | MobSF Path Traversal in GET /download/<filename> using absolute filenamesopensecurity · mobile security framework · CWE-22 | Düşük1,3 | — | %0,8 | 1 Eyl 2025 |
- CVE-2024-4339939İzleyin
Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Files
KritikCVSS 9,8İstismar yokEPSS %1opensecurity · mobile security framework19 Ağu 2024
- CVE-2025-3111639İzleyin
Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding
KritikCVSS 9,8İstismar yokEPSS %0opensecurity · mobile security framework31 Mar 2025
- CVE-2025-2480534İzleyin
Local Privilege Escalation in MobSF
YüksekCVSS 8,5İstismar yokEPSS %0opensecurity · mobile security framework5 Şub 2025
- CVE-2025-4633534İzleyin
Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload
YüksekCVSS 8,6İstismar yokEPSS %0opensecurity · mobile security framework5 May 2025
- CVE-2025-2480333İzleyin
Stored Cross-Site Scripting (XSS) in MobSF
YüksekCVSS 8,4İstismar yokEPSS %0opensecurity · mobile security framework5 Şub 2025
- CVE-2022-4154730İzleyin
Mobile Security Framework (MobSF) v0.9.2 and below was discovered to contain a local file inclusion (LFI) vulnerability in the StaticAnalyze
YüksekCVSS 7,5İstismar yokEPSS %1opensecurity · mobile security framework18 Eki 2022
- CVE-2023-4226130İzleyin
Mobile Security Framework (MobSF) <=v3.7.8 Beta is vulnerable to Insecure Permissions.
YüksekCVSS 7,5İstismar yokEPSS %1opensecurity · mobile security framework21 Eyl 2023
- CVE-2024-2919030İzleyin
MobSF SSRF Vulnerability on assetlinks_check(act_name, well_knowns)
YüksekCVSS 7,5İstismar yokEPSS %1opensecurity · mobile security framework22 Mar 2024
- CVE-2024-5400030İzleyin
Mobile Security Framework (MobSF) bypass of SSRF fix
YüksekCVSS 7,5İstismar yokEPSS %0opensecurity · mobile security framework3 Ara 2024
- CVE-2025-5816226İzleyin
MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction
OrtaCVSS 6,5İstismar yokEPSS %1opensecurity · mobile security framework1 Eyl 2025
- CVE-2025-4673026İzleyin
Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attack
OrtaCVSS 6,5İstismar yokEPSS %0opensecurity · mobile security framework5 May 2025
- CVE-2026-3354526İzleyin
MobSF has SQL Injection in its SQLite Database Viewer Utils
OrtaCVSS 6,5İstismar yokEPSS %0opensecurity · mobile security framework26 Mar 2026
- CVE-2024-4195521İzleyin
Mobile Security Framework (MobSF) has an Open Redirect in Login Redirect
OrtaCVSS 5,4Kavram kanıtıEPSS %1opensecurity · mobile security framework31 Tem 2024
- CVE-2024-5399921İzleyin
Mobile Security Framework (MobSF) Stored Cross-Site Scripting Vulnerability in "Diff or Compare" Functionality
OrtaCVSS 5,4İstismar yokEPSS %1opensecurity · mobile security framework3 Ara 2024
- CVE-2025-2480419İzleyin
Partial Denial of Service (DoS) in MobSF
OrtaCVSS 4,8İstismar yokEPSS %0opensecurity · mobile security framework5 Şub 2025
- CVE-2026-2449019İzleyin
MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field
OrtaCVSS 4,8İstismar yokEPSS %0opensecurity · mobile security framework26 Oca 2026
- CVE-2024-3121517İzleyin
Mobile Security Framework (MobSF) vulnerable to Server-Side Request Forgery (SSRF) in firebase database check
OrtaCVSS 4,3İstismar yokEPSS %1opensecurity · mobile security framework4 Nis 2024
- CVE-2025-581615İzleyin
MobSF Path Traversal in GET /download/<filename> using absolute filenames
DüşükCVSS 1,3İstismar yokEPSS %1opensecurity · mobile security framework1 Eyl 2025