ch3tanbug/vulnerability-research

Releases0

This repository contains information on all of the CVEs I found.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-45001 ↗	Jun 9, 2025Monday, 9 June 2025, 17:15	7.5 HIGH	—
react-native-keys 0.7.11 is vulnerable to sensitive information disclosure (remote) as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools.
CVE-2025-45002 ↗	Jun 9, 2025Monday, 9 June 2025, 17:15	5.4 MEDIUM	—
Vigybag v1.0 and before is vulnerable to Cross Site Scripting (XSS) via the upload profile picture function under my profile.
CVE-2024-46452 ↗	Jun 9, 2025Monday, 9 June 2025, 17:15	6.1 MEDIUM	—
A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b allows attackers to redirect victim users to a malicious site via a crafted URL.