Harmony Chat Android Client Has Information Leakage Vulnerability

Wochat Android client is a business socialization mobile platform. There is an information leakage vulnerability in Wochat Android client. An attacker can exploit to obtain sensitive information...

CVE-2019-8919

The seadroid aka Seafile Android Client application through 2.2.13 for Android always uses the same Initialization Vector IV with Cipher Block Chaining CBC Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks...

CVE-2019-8919

The seadroid aka Seafile Android Client application through 2.2.13 for Android always uses the same Initialization Vector IV with Cipher Block Chaining CBC Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks...

Code injection

The seadroid aka Seafile Android Client application through 2.2.13 for Android always uses the same Initialization Vector IV with Cipher Block Chaining CBC Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks...

CVE-2019-8919

The CVE-2019-8919 entry applies to the Seafile Android Client (seadroid) up to version 2.2.13, which uses the same Initialization Vector (IV) for CBC encryption of private data. This IV reuse enables chosen-plaintext and dictionary-style attacks against encrypted data, as described in the NVD ent...

CVE-2019-8919: Use of Insufficiently Random Values

The seadroid aka Seafile Android Client application through 2.2.13 for Android always uses the same Initialization Vector IV with Cipher Block Chaining CBC Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks...

WSD-T13 Cloud Storage Camera (Android Client) Exists with Override Access Vulnerability

Ltd. is an enterprise specializing in the research and development, production, sales and service of security monitoring products. WSD-T13 Cloud Storage Camera Android client suffers from an overstepping access vulnerability. The vulnerability is due to the server on the client request data...

WSD-T13 Cloud Storage Camera (Android client) suffers from an override access vulnerability (CNVD-2019-06647)

Ltd. is an enterprise specializing in the research and development, production, sales and service of security monitoring products. WSD-T13 Cloud Storage Camera Android client suffers from an overstepping access vulnerability. The vulnerability is due to the server on the client request data...

Nextcloud: Bypassing lock protection

Nextcloud allows multi account within the android client app and relies on a single lock Based on the exposed intent nc://login, it is possible to add a new account under attacker domain and open the Nextcloud without the lock check. Proof of concept 1. open the NC app with the lock displayed 2...

WiGLE - Wifi Wardriving (Nethugging Client For Android)

Open source network observation, positioning, and display client from the world's largest queryable database of wireless networks. Can be used for site-survey, security analysis, and competition with your friends. Collect networks for personal research or upload to https://wigle.net. WiGLE has be...

SAP Mobile Secure Android Client Information Disclosure Vulnerability

SAP Mobile Secure Android Client is an Android-based mobile device management and security application from SAP. An information disclosure vulnerability exists in versions prior to SAP Mobile Secure Android client 6.60.19942.0 SP28 1711, which can be exploited by an attacker to access restricted...

CVE-2018-2500

Under certain conditions SAP Mobile Secure Android client before version 6.60.19942.0 SP28 1711 allows an attacker to access information which would otherwise be restricted...

CVE-2018-2500: Undefined Security Weakness

Under certain conditions SAP Mobile Secure Android client before version 6.60.19942.0 SP28 1711 allows an attacker to access information which would otherwise be restricted...

Code injection

SAP Mobile Secure Android Application, Mobile-secure.apk Android client, before version 6.60.19942.0, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Install the Mobile Secure Android client released in Mid-Oct 2018...

CVE-2018-2482

SAP Mobile Secure Android Application, Mobile-secure.apk Android client, before version 6.60.19942.0, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Install the Mobile Secure Android client released in Mid-Oct 2018...

CVE-2018-2482

SAP Mobile Secure Android Application, Mobile-secure.apk Android client, before version 6.60.19942.0, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Install the Mobile Secure Android client released in Mid-Oct 2018...

CVE-2018-1000664

daneren2005 DSub for Subsonic Android client version 5.4.1 contains a CWE-295: Improper Certificate Validation vulnerability in HTTPS Client that can result in Any non-CA signed server certificate, including self signed and expired, are accepted by the client. This attack appear to be exploitable...

Input validation

daneren2005 DSub for Subsonic Android client version 5.4.1 contains a CWE-295: Improper Certificate Validation vulnerability in HTTPS Client that can result in Any non-CA signed server certificate, including self signed and expired, are accepted by the client. This attack appear to be exploitable...

Rocket.Chat: Blind XSS in the rocket.chat registration email

Note: This report was initially sent via email and I was invited to submit this here. Hi team, During an audit on a third-party, I discovered that rocket.chat Android client might be vulnerable to blind XSS. My XSS payload fired in the context of the target's rocket.chat client as you can see bel...

JCG-AC836M Jetix Router Android client suffers from information leakage vulnerability

Ltd. is a professional manufacturer and operator of network and communication equipment, and is a leader in the field of manufacturing and marketing of client-side equipment for wireless local area networks in China. An information leakage vulnerability exists in the Android client of the...