Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

pypi

mobsf

pypi

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

View on github.com · View on pypi.org

Security Advisories for mobsf in pypi

Moderate
17 days ago

MobSF Vulnerable to Arbitrary File Read via Path Traversal in ZIP Uploads GSA_kwCzR0hTQS04ajQ5LW1tY3gtNG1wNc4ABkc6

pypi mobsf
Moderate
17 days ago

MobSF's CSRF checks not enforced after Django migration GSA_kwCzR0hTQS0zcDU0LTU2N3AtMndwcs4ABkc5

pypi mobsf
Low
17 days ago

MobSF has SSRF port restriction bypass in assetlinks_check GSA_kwCzR0hTQS05NXB4LTM0eDUtcDM3aM4ABkc4

pypi mobsf
Moderate
17 days ago

MobSF Vulnerable to Zip Bomb Denial of Service via Per-File Size Limit Bypass in ZIP/APK Extraction GSA_kwCzR0hTQS14NzY4LTg2NDItbW1xOc4ABkc3

pypi mobsf
Moderate
5 months ago

MobSF has SQL Injection in its SQLite Database Viewer Utils GSA_kwCzR0hTQS1ocWpyLTQzcjUtOXE1OM4ABUG2

pypi mobsf
High
7 months ago

MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field GSA_kwCzR0hTQS04aGY3LWg4OXAtM3Bxas4ABRlj

pypi mobsf
Low
about 1 year ago

MobSF Path Traversal in GET /download/<filename> using absolute filenames GSA_kwCzR0hTQS1jY2MzLWZ2ZngtbXczds4ABLmJ

pypi mobsf
Moderate
about 1 year ago

MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction GSA_kwCzR0hTQS05Z2g4LTlyOTUtM2ZjM84ABLmI

pypi mobsf
High
about 1 year ago

MobSF vulnerability allows SSRF due to the allow_redirects=True parameter GSA_kwCzR0hTQS1tNDM1LTl2NnItdjVmNs4ABJhh

pypi mobsf
Moderate
over 1 year ago

Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attack GSA_kwCzR0hTQS1jNXZnLTI2cDgtcThjcs4ABHek

pypi mobsf
Moderate
over 1 year ago

Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload GSA_kwCzR0hTQS1td2ZnLTk0OGYtMmNjNc4ABHd4

pypi mobsf
Moderate
over 1 year ago

Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding GSA_kwCzR0hTQS1mY2ZxLW04cDYtZ3c1Ns4ABGJU

pypi mobsf
High
over 1 year ago

MobSF Local Privilege Escalation GSA_kwCzR0hTQS03OWY2LXA2NWotM20ybc4ABEKn

pypi mobsf
High
over 1 year ago

MobSF Partial Denial of Service (DoS) GSA_kwCzR0hTQS1qcm04LXhnZjMtZndxcs4ABEKm

pypi mobsf
High
over 1 year ago

MobSF Stored Cross-Site Scripting (XSS) GSA_kwCzR0hTQS1jeHFxLXczeDUtN3BoM84ABEKl

pypi mobsf
Moderate
almost 2 years ago

Mobile Security Framework (MobSF) Stored Cross-Site Scripting Vulnerability in "Diff or Compare" Functionality GSA_kwCzR0hTQS01amM2LWg5dzctam0zcM4ABCBF

pypi mobsf
High
about 2 years ago

Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Files GSA_kwCzR0hTQS00aGgzLXZqMzItZ3I2as4AA-xV

pypi mobsf
Moderate
about 2 years ago

MobSF vulnerable to Open Redirect in Login Redirect GSA_kwCzR0hTQS04bTlqLTJmMzItMnZ4NM4AA-TD

pypi mobsf
Moderate
over 2 years ago

Mobile Security Framework (MobSF) vulnerable to SSRF in firebase database check GSA_kwCzR0hTQS13cGZmLXdtODQteDVjeM4AA6o4

pypi mobsf
Potential
High
over 2 years ago

SSRF Vulnerability on assetlinks_check(act_name, well_knowns) GSA_kwCzR0hTQS13ZmdqLXdyZ2gtaDNyM84AA6PP

pypi mobsfscan
High
almost 4 years ago

MobSF allows attackers to read arbitrary files via a crafted HTTP request GSA_kwCzR0hTQS1mNDJwLXZjOHAtN3g1NM4AAvaj

pypi mobsf

Filter by Severity

Moderate 11 High 8 Low 2