An issue was discovered in Rakuten Send Anywhere (File Transfer) for Android (com.estmob.android.sendanywhere) 23.2.9. The vulnerability allows untrusted applications (with no permissions) to force arbitrary file downloads into the app's scoped storage. The resulting files appear in the application's trusted Received interface. These conditions establish a vector for arbitrary code execution if the payload is an APK file, or a denial-of-service condition through resource exhaustion from oversized transfers.

Last Modified: Jun 26, 2026

Published: Jun 15, 2026

CVE-2025-13476

Rakuten Viber uses broken or risky cryptographic Algorithm

Last Modified: Mar 10, 2026

Published: Mar 05, 2026

CVE-2025-55996

Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface

Last Modified: Oct 16, 2025

Published: Sep 12, 2025

CVE-2024-47865

Missing authentication for critical function vulnerability exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote unauthenticated attacker may update or downgrade the firmware on the device.

Last Modified: Apr 15, 2026

Published: Nov 20, 2024

CVE-2024-48895

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote authenticated attacker may execute an arbitrary OS command.

Last Modified: Apr 15, 2026

Published: Nov 20, 2024

Items Per Page