MobSF
MobSF/Mobile-Security-Framework-MobSF reposunu GitHub'da aç
Repo açıklaması, sahibi tarafından yazılmıştırMobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Aktif son commit 7 gün önce
Son 52 haftanın 10 haftasında commit var
- Kategori
- Sızma testi
- Alt kategori
- Mobile Penetration Testing
- Lisans
- GPL-3.0
- Son sürüm
- Sürüm v4.5.3, 21 Eyl 2026 (yalnızca kaynak kod, indirilebilir dosya yok)
- Yıldız
- 22 B
- GitHub repo kimliği
- 30102273
- Kaynak liste
- awesome-cyber-security-tools (CC0-1.0)
- Son kontrol
- 19 Eki 2026
Güvenlik duyuruları
Geliştiricilerin GitHub'da yayınladığı duyurular. Yalnızca başka yerde, örneğin NVD'de bildirilen açıklar dahil değil.
- GHSA-hh7q-v28p-p55m Orta 21 Eyl 2026
Cross-Site Request Forgery via GET-based dynamic analysis actions - GHSA-m83p-3cgp-6p8c Orta 21 Eyl 2026
Path traversal in iOS IPA icon extraction via unvalidated CFBundleExecutable allows restricted app/image read - GHSA-3fr8-jfgg-fm3x Orta 21 Eyl 2026
Server-Side Request Forgery (SSRF) via X-Forwarded-Host Header in /httptools Endpoint - GHSA-cvhc-xjjc-c4p3 Düşük 21 Eyl 2026
Denial of service via APK decompression bomb in the bundled apkinspector ZIP reader - GHSA-c8g7-42qj-frj3 Orta 21 Eyl 2026
Windows-only path traversal via root-relative paths bypasses is_path_traversal() - GHSA-95px-34x5-p37h CVE-2026-68927 Düşük 5 Tem 2026
SSRF port restriction bypass in assetlinks_check - GHSA-x768-8642-mmq9 CVE-2026-68924 Orta 5 Tem 2026
Zip Bomb Denial of Service via Per-File Size Limit Bypass in ZIP/APK Extraction - GHSA-3p54-567p-2wpr CVE-2026-68923 Orta 5 Tem 2026
Regression: CSRF checks not enforced after Django migration - GHSA-8j49-mmcx-4mp5 CVE-2026-68922 Orta 5 Tem 2026
Arbitrary File Read via Path Traversal in ZIP Uploads - GHSA-hqjr-43r5-9q58 CVE-2026-33545 Orta 21 Mar 2026
SQL Injection in SQLite Database Viewer utils - GHSA-8hf7-h89p-3pqj CVE-2026-24490 Yüksek 26 Oca 2026
Stored XSS via Manifest Analysis - Dialer Code Host Field - GHSA-9gh8-9r95-3fc3 CVE-2025-58162 Orta 31 Ağu 2025
Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction - GHSA-ccc3-fvfx-mw3v CVE-2025-58161 Düşük 31 Ağu 2025
Path Traversal in GET /download/<filename> using absolute filenames in MobSF data directory - GHSA-mwfg-948f-2cc5 CVE-2025-46335 Orta 4 May 2025
Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload - GHSA-c5vg-26p8-q8cr CVE-2025-46730 Orta 4 May 2025
Web Server Resource Exhaustion via ZIP of Death Attack - GHSA-fcfq-m8p6-gw56 CVE-2025-31116 Orta 29 Mar 2025
SSRF on assetlinks_check with DNS Rebinding - GHSA-79f6-p65j-3m2m CVE-2025-24805 Yüksek 5 Şub 2025
Local Privilege escalation due to leaked REST API key in web UI - GHSA-jrm8-xgf3-fwqr CVE-2025-24804 Orta 5 Şub 2025
Partial Denial of Service due to strict regex check in iOS report view URL - GHSA-cxqq-w3x5-7ph3 CVE-2025-24803 Yüksek 5 Şub 2025
Stored Cross-Site Scripting in iOS dynamic_analysis view via `bundle` id - GHSA-5jc6-h9w7-jm3p CVE-2024-53999 Yüksek 3 Ara 2024
Stored Cross-Site Scripting Vulnerability in Recent Scans "Diff or Compare"
hackshelf'in gördüğü değişiklikler
- 19 Eki 2026 İlk kontrol, durum Aktif