GREE+ application for Android cross-site request forgery vulnerability

GREE+ application for Android is an Android-based application for controlling and managing GREE air-conditioning devices from Gree Electric Appliances GREE, China. A cross-site request forgery vulnerability exists in version 1.4.0.8 of the GREE+ application for Android. The vulnerability stems fr...

CVE-2018-20582

The GREE+ aka com.gree.greeplus application 1.4.0.8 for Android suffers from Cross Site Request Forgery...

CVE-2018-20582: Cross-Site Request Forgery (CSRF)

The GREE+ aka com.gree.greeplus application 1.4.0.8 for Android suffers from Cross Site Request Forgery...

Geo++(R) GNCASTER 1.4.0.7 Insecure Handling Of Long URLs

Advisory: Geo++R GNCASTER: Insecure handling of long URLs During a penetration test, RedTeam Pentesting discovered that the GNCASTER software does not handle long URLs correctly. An attacker can use this to crash the server software or potentially execute code on the server. Details =======...