Media
CVE-2026-68924
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 22
Restablecer filtros
Media
CVE-2026-68922
MobSF Vulnerable to Arbitrary File Read via Path Traversal in ZIP Uploads
Baja
CVE-2026-68927
MobSF has SSRF port restriction bypass in assetlinks_check
Media
CVE-2026-68923
MobSF's CSRF checks not enforced after Django migration
Media
CVE-2026-33545
MobSF has SQL Injection in its SQLite Database Viewer Utils
Alta
CVE-2026-24490
MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field
Baja
CVE-2025-58161
MobSF Path Traversal in GET /download/<filename> using absolute filenames
Media
CVE-2025-58162
MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction
Media
CVE-2025-46335
Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload
Media
CVE-2025-46730
Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attack
Alta
CVE-2025-24804
MobSF Partial Denial of Service (DoS)
Alta
CVE-2025-24803
MobSF Stored Cross-Site Scripting (XSS)
Alta
CVE-2025-24805
MobSF Local Privilege Escalation
Media
CVE-2024-53999
Mobile Security Framework (MobSF) Stored Cross-Site Scripting Vulnerability in "Diff or Compare" Functionality
Media
CVE-2024-41955
MobSF vulnerable to Open Redirect in Login Redirect
Alta
CVE-2024-43399
Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Files
Media
CVE-2024-31215
Mobile Security Framework (MobSF) vulnerable to SSRF in firebase database check
Alta
CVE-2022-41547
MobSF allows attackers to read arbitrary files via a crafted HTTP request
Media
CVE-2025-31116
Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding
Alta
CVE-2024-54000
MobSF vulnerability allows SSRF due to the allow_redirects=True parameter
Alta
CVE-2024-29190
SSRF Vulnerability on assetlinks_check(act_name, well_knowns)
Alta
CVE-2023-42261
Mobile Security Framework (MobSF) <=v3.7.8 Beta is vulnerable to Insecure Permissions. NOTE: the vendor's position is that authentication is intentionally not implemented because the product is not in
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.