Design/Logic Flaw

Prior to 4.4.1.10, the Norton Family Android App can be susceptible to a Denial of Service DoS exploit. A DoS attack is a type of attack whereby the perpetrator attempts to make a particular device unavailable to its intended user by temporarily or indefinitely disrupting services of a specific...

CVE-2017-15529

Prior to 4.4.1.10, the Norton Family Android App can be susceptible to a Denial of Service DoS exploit. A DoS attack is a type of attack whereby the perpetrator attempts to make a particular device unavailable to its intended user by temporarily or indefinitely disrupting services of a specific...

CVE-2017-15530

Prior to 4.4.1.10, the Norton Family Android App can be susceptible to an Information Disclosure issue. Information disclosure is a very common issue that attackers will attempt to exploit as a first pass across the application. As they probe the application they will take note of anything that m...

CVE-2017-15530

CVE-2017-15530 affects the Norton Family Android App. Connected records indicate an information disclosure vulnerability in versions prior to 4.4.1.10, where an attacker could obtain information through the app (e.g., error messages, system information, user data, version numbers, paths). The iss...

Automattic: Improper markup sanitisation in Simplenote Android application.

Description The Simplenote Android application 1.5.6 still allows users to embed fully-fledged forms. html Sign in to Simplenote Please sign in Email Password Remember Me Forgot your password? F246484 A more convincing proof of concept could consist of hiding the form inside several paragraphs o...

PT-2017-14087

Name of the Vulnerable Software and Affected Versions Norton Family Android App versions prior to 4.4.1.10 Description The issue allows for a Denial of Service DoS exploit, where an attacker attempts to make a device unavailable by disrupting its services. This can be achieved by temporarily or...

PT-2017-14089

Name of the Vulnerable Software and Affected Versions Norton Family Android App versions prior to 4.4.1.10 Description The issue concerns an information disclosure problem, which is a common target for attackers as they probe the application. Attackers may exploit this to gather sensitive...

CVE-2017-15529: Uncontrolled Resource Consumption

Prior to 4.4.1.10, the Norton Family Android App can be susceptible to a Denial of Service DoS exploit. A DoS attack is a type of attack whereby the perpetrator attempts to make a particular device unavailable to its intended user by temporarily or indefinitely disrupting services of a specific...

CVE-2017-15530: Exposure of Sensitive Information to an Unauthorized Actor

Prior to 4.4.1.10, the Norton Family Android App can be susceptible to an Information Disclosure issue. Information disclosure is a very common issue that attackers will attempt to exploit as a first pass across the application. As they probe the application they will take note of anything that m...

Vaultek Gun Safe VT20i Information Disclosure Vulnerability (CNVD-2018-00316)

The Vaultek Gun Safe VT20i aka BlueSteal is a fingerprint-enabled gun safe product. A security vulnerability exists in the Vaultek Gun Safe VT20i that stems from the program's failure to encrypt the session between the Android application and the safe. An attacker could exploit the vulnerability ...

Growatt Monitoring System Android App Multiple Override Access Vulnerabilities

Growatt Monitoring System Android APP is a client application that provides PV monitoring services. Growatt Monitoring System Android APP has overstepped access vulnerabilities in multiple places. Attackers can obtain sensitive information, including: power plant equipment information, name, powe...

Vibease Wireless Remote Vibrator app for Android and Vibease Chat app for iOS vulnerabilities

Vibease Wireless Remote Vibrator app for Android is a wireless remote control app based on Android platform.Vibease Chat app for iOS is an online chat software based on iOS platform. A security vulnerability exists in the Vibease Wireless Remote Vibrator app for Android and the Vibease Chat app f...

Smart Heat Temperature Control App for Android suffers from an override access vulnerability

Smart Heat Temperature Control APP a home temperature control software, users only need to add the home's Internet-accessible thermostat to the software, you can use your phone or tablet to control the temperature of your home's HVAC equipment. The Android version of Smart Heat Temperature Contro...

Unauthorized Access Vulnerability in Xiao Feng Air Ching App Android Version

Ltd. developed with the work of the Xiao Feng Air Dorothy system APP, mainly used to monitor the indoor air quality and Xiao Feng Air Dorothy internal and external machine running status, monitoring items including PM2.5, formaldehyde, oxygen, temperature and humidity, and can be through the APP...

Xiaofeng Air Ching App for Android has an overstepping loophole

Ltd. developed with the work of the Xiao Feng Air Dorothy system APP, mainly used to monitor the indoor air quality and Xiao Feng Air Dorothy internal and external machine running status, monitoring items including PM2.5, formaldehyde, oxygen, temperature and humidity, and can be through the APP...

Xiaofeng Air Ching App for Android suffers from arbitrary account password reset vulnerability

Xiaofeng Air Dorje APP is the APP developed by Shenzhen Xiaofeng Technology Co., Ltd. to work with Xiaofeng Air Dorje system, mainly used to monitor the indoor air quality and Xiaofeng Air Dorje internal and external machine operation status, monitoring items including PM2.5, formaldehyde, oxygen...

SMS Bombing Vulnerability in Xiaofeng Air Ching App Android Version

Ltd. developed with the work of the Xiao Feng Air Dorothy system APP, mainly used to monitor the indoor air quality and Xiao Feng Air Dorothy internal and external machine running status, monitoring items including PM2.5, formaldehyde, oxygen, temperature and humidity, and can be through the APP...

VK.com: Stealing Private Information in VK Android App through PlayerProxy Port Remotely

Incorrect interaction with the network...

HEYI Intelligent Alarm System Android APP has malicious bulk registration vulnerability

HEYI Smart Alarm System Android APP is a smart alarm APP that integrates security class monitoring, firmware upgrade, smart extension and so on. HEYI Smart Alarm System Android APP has a malicious bulk registration vulnerability, attackers can bulk register accounts by grabbing packet data to...

Rimet Wifi Smart Temperature Control Android APP has an override access vulnerability

Rimet Wifi Smart Temperature Control Android APP is a management platform for smart hardware devices. Rimet Wifi Intelligent Temperature Control Android APP has an override access vulnerability. After logging into the client, the attacker can obtain sensitive information such as patient's name,...