CVE-2025-65830

Due to a lack of certificate validation, all traffic from the mobile application can be intercepted. As a result, an adversary located "upstream" can decrypt the TLS traffic, inspect its contents, and modify the requests in transit. This may result in a total compromise of the user's account if the attacker intercepts a request with active authentication tokens or cracks the MD5 hash sent on login.

• CWE-295

• https://gist.github.com/dead1nfluence/4dffc239b4a460f41a03345fd8e5feb5#file-lack-of-certificate-pinning-mdThird Party Advisory
• https://github.com/dead1nfluence/Meatmeet-Pro-Vulnerabilities/blob/main/Mobile-Application/Lack-of-Certificate-Pinning.mdThird Party Advisory

Published

Dec 10, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-65825The firmware on the basestation of the Meatmeet is not encry…4.6
• CVE-2025-65826The mobile application was found to contain stored credentia…9.8
• CVE-2025-65827The mobile application is configured to allow clear text tra…9.1
• CVE-2025-65828An unauthenticated attacker within proximity of the Meatmeet…6.5
• CVE-2025-65829The ESP32 system on a chip (SoC) that powers the Meatmeet ba…6.8
• CVE-2025-6583A vulnerability, which was classified as critical, was found…8.8
• CVE-2025-65831The application uses an insecure hashing algorithm (MD5) to …7.5
• CVE-2025-65832The mobile application insecurely handles information stored…4.6
• CVE-2025-65834Meltytech Shotcut 25.10.31 is vulnerable to Buffer Overflow.…9.8
• CVE-2025-65835The Cordova plugin cordova-plugin-x-socialsharing (SocialSha…6.2
• CVE-2025-65836PublicCMS V5.202506.b is vulnerable to SSRF. in the chat int…9.1
• CVE-2025-65837PublicCMS V5.202506.b is vulnerable to Cross Site Scripting …5.4