PyPI / mobsf

Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Files

Modified: 8/20/2024

Mobile Security Framework (MobSF) Stored Cross-Site Scripting Vulnerability in "Diff or Compare" Functionality

Modified: 6/30/2025

MobSF Local Privilege Escalation

Modified: 2/5/2025

MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field

Modified: 2/3/2026

MobSF vulnerable to Open Redirect in Login Redirect

Modified: 8/2/2024

MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction

Modified: 9/2/2025

Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attack

Modified: 5/5/2025

MobSF Path Traversal in GET /download/<filename> using absolute filenames

Modified: 9/2/2025

MobSF Stored Cross-Site Scripting (XSS)

Modified: 2/5/2025

MobSF allows attackers to read arbitrary files via a crafted HTTP request

Modified: 11/8/2023

Mobile Security Framework (MobSF) has a SSRF Vulnerability fix bypass on assetlinks_check with DNS Rebinding

Modified: 6/10/2026

MobSF has SQL Injection in its SQLite Database Viewer Utils

Modified: 3/27/2026

MobSF Partial Denial of Service (DoS)

Modified: 2/26/2025

MobSF vulnerability allows SSRF due to the allow_redirects=True parameter

Modified: 6/27/2025

Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload

Modified: 5/5/2025

Mobile Security Framework (MobSF) vulnerable to SSRF in firebase database check

Modified: 6/30/2025

Modified: 6/10/2026

Modified: 6/27/2025

Modified: 6/10/2026

Modified: 6/10/2026