mobsf vulnerabilities (PyPI)
22 vulnerabilities.
-
mobsfPyPI MobSF: CSRF checks not enforced after Django migration 6.5 Medium -
mobsfPyPI MobSF: SSRF port restriction bypass in assetlinks_check 3.0 Low -
mobsfPyPI MobSF: Arbitrary File Read via Path Traversal in ZIP Uploads 5.5 Medium -
mobsfPyPI MobSF: Zip Bomb Denial of Service via Per-File Size Limit Bypass in ZIP/APK Extraction 4.9 Medium -
mobsfPyPI MobSF has SQL Injection in its SQLite Database Viewer Utils 5.3 Medium -
mobsfPyPI MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field 8.1 High -
mobsfPyPI MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction 6.5 Medium -
mobsfPyPI MobSF Path Traversal in GET /download/<filename> using absolute filenames 1.3 Low -
mobsfPyPI Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attack 6.8 Medium -
mobsfPyPI Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload 8.6 High -
mobsfPyPI Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding 4.4 Medium -
mobsfPyPI Stored Cross-Site Scripting (XSS) in MobSF 8.4 High -
mobsfPyPI Partial Denial of Service (DoS) in MobSF 4.8 Medium -
mobsfPyPI Local Privilege Escalation in MobSF 8.5 High -
mobsfPyPI Mobile Security Framework (MobSF) Stored Cross-Site Scripting Vulnerability in "Diff or Compare" Functionality 8.1 High -
mobsfPyPI Mobile Security Framework (MobSF) bypass of SSRF fix 7.5 High -
mobsfPyPI Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Files 8.0 High -
mobsfPyPI Mobile Security Framework (MobSF) has an Open Redirect in Login Redirect 5.2 Medium -
mobsfPyPI Mobile Security Framework (MobSF) vulnerable to Server-Side Request Forgery (SSRF) in firebase database check 6.3 Medium -
mobsfPyPI MobSF SSRF Vulnerability on assetlinks_check(act_name, well_knowns) 7.5 High -
mobsfPyPI Withdrawn Advisory: Mobile Security Framework (MobSF) Vulnerable to Insecure Permissions 7.5 High -
mobsfPyPI MobSF allows attackers to read arbitrary files via a crafted HTTP request 7.5 High