CVE-2017-2752

A potential security vulnerability caused by incomplete obfuscation of application configuration information was discovered in Tommy Hilfiger TH24/7 Android app versions 2.0.0.11, 2.0.1.14, 2.1.0.16, and 2.2.0.19. HP has no access to customer data as a result of this issue...

CVE-2019-9938

The SHAREit application before 4.0.42 for Android allows a remote attacker on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated to download arbitrary files from the device including contacts, photos, videos, sound clips, etc. The...

Application Hijacking Vulnerability in Beijing Traffic Police Android Client

Beijing Traffic Police APP is used to handle traffic control business processing and information services. An application hijacking vulnerability exists in the Beijing Traffic Police Android client. An attacker can exploit this vulnerability to obtain sensitive information...

CVE-2019-9601

The ApowerManager application through 3.1.7 for Android allows remote attackers to cause a denial of service via many simultaneous /?Key=PhoneRequestAuthorization requests...

Severe Flaws in SHAREit Android App Let Hackers Steal Your Files

Security researchers have discovered two high-severity vulnerabilities in the SHAREit Android app that could allow attackers to bypass device authentication mechanism and steal files containing sensitive from a victim's device. With over 1.5 billion users worldwide, SHAREit is a popular file...

Robert Bosch Smart Camera App for Android Privilege Permission and Access Control Vulnerability

Robert Bosch Smart Camera App for Android is an Android-based smart camera management application from Robert Bosch, Germany. A privilege-granting and access control vulnerability exists in versions of the Bosch Smart Camera App for Android prior to 1.3.1, which stems from a failure to set securi...

CVE-2019-7728

An issue was discovered in the Bosch Smart Camera App before 1.3.1 for Android. Due to improperly implemented TLS certificate checks, a malicious actor could potentially succeed in executing a man-in-the-middle attack for some connections. The Bosch Smart Home App is not affected. iOS Apps are no...

CVE-2019-8919

The seadroid aka Seafile Android Client application through 2.2.13 for Android always uses the same Initialization Vector IV with Cipher Block Chaining CBC Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks...

Authentication flaw

Under certain conditions SAP Business One Mobile Android App, version 1.2.12, allows an attacker to access information which would otherwise be restricted...

CVE-2019-0256

Under certain conditions SAP Business One Mobile Android App, version 1.2.12, allows an attacker to access information which would otherwise be restricted...

CVE-2019-0256

Under certain conditions SAP Business One Mobile Android App, version 1.2.12, allows an attacker to access information which would otherwise be restricted...

Zomato: Improper validation allows user to unlock Zomato Gold multiple times at the same restaurant within one day

Summary: Using this vulnerability, a user can use his account to claim Zomato Gold benefit several times in the same restaurant within one day. Description: Based on Zomato Gold terms and condition, Zomato Gold can be used only once at each partner restaurant in a day. But I think it doesn't work...

Vulnerability of the Android APP of Hunan Provincial People's Government with Ultra-rights Access (CNVD-2019-01346)

Hunan Provincial People's Government Android APP is the mobile portal of Hunan Provincial Government information disclosure, with news news, matters inquiries, matters applications, office query, service evaluation, payment services, logistics services, material upload, online reservation, office...

Unspecified Vulnerability in Philips HealthSuite Health Android App

Philips HealthSuite Health Android App is an Android-based application from Philips Netherlands for controlling and managing Philips wearable health devices. A security vulnerability exists in the Philips HealthSuite Health Android App that stems from the application's use of simpler encryption. ...

CVE-2018-19001

Philips HealthSuite Health Android App, all versions. The software uses simple encryption that is not strong enough for the level of protection required...

Information disclosure

Philips HealthSuite Health Android App, all versions. The software uses simple encryption that is not strong enough for the level of protection required...

CVE-2018-19001

CVE-2018-19001 affects the Philips HealthSuite Health Android App (all versions) due to inadequate encryption strength (CWE-326). The root cause is the use of simple encryption not strong enough for the required protection level, impacting confidentiality and integrity when physical access is ava...

CVE-2018-19001

Philips HealthSuite Health Android App, all versions. The software uses simple encryption that is not strong enough for the level of protection required...

Updated kdeconnect-kde packages fix security vulnerability

The kdeconnect-kde package has been updated to version 1.3.3, which fixes an issue with modern encryption algorithms being disabled with SSH, and also fixes several bugs and updates compatibility with the Android app...

CVE-2018-16223

Insecure Cryptographic Storage of credentials in com.vestiacom.qbeecamerapreferences.xml in the QBee Cam application through 1.0.5 for Android allows an attacker to retrieve the username and password...