1780 matches found
ownCloud: GitHub Security Lab (GHSL) Vulnerability Report: Insufficient path validation in ReceiveExternalFilesActivity.java (GHSL-2022-060)
The Owncloud Android app was found to have insufficient path validation in the ReceiveExternalFilesActivity activity, allowing attackers to read from and write to the application's internal storage. This could be exploited by uploading arbitrary files from the app's internal storage or by writing...
ownCloud: GitHub Security Lab (GHSL) Vulnerability Report: SQLInjection in FileContentProvider.kt (GHSL-2022-059)
Vulnerability description not provided...
CVE-2022-23745
A potential memory corruption issue was found in Capsule Workspace Android app running on GrapheneOS. This could result in application crashing but could not be used to gather any sensitive information...
CVE-2022-23745
A potential memory corruption issue was found in Capsule Workspace Android app running on GrapheneOS. This could result in application crashing but could not be used to gather any sensitive information...
CVE-2022-23745
A potential memory corruption issue was found in Capsule Workspace Android app running on GrapheneOS. This could result in application crashing but could not be used to gather any sensitive information...
Memory corruption
A potential memory corruption issue was found in Capsule Workspace Android app running on GrapheneOS. This could result in application crashing but could not be used to gather any sensitive information...
CVE-2022-23745
A potential memory corruption issue was found in Capsule Workspace Android app running on GrapheneOS. This could result in application crashing but could not be used to gather any sensitive information...
CVE-2022-23745
CVE-2022-23745 affects Capsule Workspace Android app (on GrapheneOS). The issue is a memory corruption vulnerability in the Capsule Workspace Android app that can cause the application to crash. The available documents do not indicate any ability to read or exfiltrate sensitive data. Remediation ...
Reddit: Can use the Reddit android app as usual even though revoking the access of it from reddit.com
Summary: Hi Team, For the last 4 days, I kept testing reddit web. That time, I revoked app access from the old.reddit.com and i checked my app and as expected i was not able to use the account in my app. After 2 days I was checking the chat invites feature on the web and after some time I turned ...
CVE-2021-40668
The Android application HTTP File Server Version 1.4.1 by 'slowscript' is affected by a path traversal vulnerability that permits arbitrary directory listing, file read, and file write...
Sensitive files/ data exists post deletion of user account
None...
CVE-2021-27768
Using the ability to perform a Man-in-the-Middle MITM attack, which indicates a lack of hostname verification, sensitive account information was able to be intercepted. In this specific scenario, the application's network traffic was intercepted using a proxy server set up in 'transparent' mode...
HCL Technologies HCL Verse 信任管理问题漏洞
HCL Technologies HCL Verse is a mobile application from HCL Technologies India that allows access to emails and life plan management.A security vulnerability exists in versions of HCL Technologies HCL Verse for Android prior to version 12.0.9, which stems from a server setup and login process in...
CVE-2021-41993
CVE-2021-41993 affects PingID Android app versions prior to 1.19 due to a misconfiguration of RSA. The flaw enables pre-computed dictionary attacks that can cause an offline MFA bypass when using PingID Windows Login. Public references in NVD/CVE records confirm the vulnerability and its impact a...
Ping Identity Android App 安全特征问题漏洞
Ping Identity Android App is a mobile app for authentication from Ping Identity. A security vulnerability exists in Ping Identity Android App versions prior to 1.19 that stems from an RSA misconfiguration that is vulnerable to a pre-computed dictionary attack, resulting in bypassing the offline M...
CVE-2022-24886
Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. In versions prior to 3.19.0, any application with notification permission can access contacts if Nextcloud has access to Contacts without applying for the Contacts permission itself. Version 3.19.0...
CVE-2022-24886 Exposure of Sensitive Information to an Unauthorized Actor in com.nextcloud.client
Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. In versions prior to 3.19.0, any application with notification permission can access contacts if Nextcloud has access to Contacts without applying for the Contacts permission itself. Version 3.19.0...
CVE-2022-24886
Summary of CVE-2022-24886 (Nextcloud Android app) The issue affects Nextcloud Android app versions prior to 3.19.0 where any app with notification permission can access contacts if Nextcloud has contact access, without requesting the Contacts permission itself. Root cause: a vulnerability in the ...
CVE-2022-24886 Exposure of Sensitive Information to an Unauthorized Actor in com.nextcloud.client
Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. In versions prior to 3.19.0, any application with notification permission can access contacts if Nextcloud has access to Contacts without applying for the Contacts permission itself. Version 3.19.0...