EUVD-2017-18734

Malware in sbrugna...

EUVD-2017-18736

Malware in sbrugna...

EUVD-2017-18733

Malware in sbrugna...

CVE-2017-9819

The National Payments Corporation of India BHIM application 1.3 for Android does not properly restrict use of the OTP feature, which makes it easier for attackers to bypass authentication...

Authentication flaw

The National Payments Corporation of India BHIM application 1.3 for Android relies on three hardcoded strings AK-NPCIMB, IM-NPCIBM, and VK-NPCIBM for SMS validation, which makes it easier for attackers to bypass authentication...

CVE-2017-9818

The National Payments Corporation of India BHIM application 1.3 for Android relies on a four-digit passcode, which makes it easier for attackers to obtain access...

CVE-2017-9818

CVE-2017-9818 affects the National Payments Corporation of India BHIM Android app (version 1.3). The issue is that the app relies on a four-digit passcode, which the available documents describe as enabling easier access for attackers. The connected documents confirm the component and root cause ...

CVE-2017-9820

The National Payments Corporation of India BHIM application 1.3 for Android uses a custom keypad for which the input element is available to the Accessibility service, which makes it easier for attackers to bypass authentication...

PT-2018-8540

Name of the Vulnerable Software and Affected Versions National Payments Corporation of India BHIM application version 1.3 Description The issue concerns the National Payments Corporation of India BHIM application, which relies on three hardcoded strings AK-NPCIMB, IM-NPCIBM, and VK-NPCIBM for SMS...

PT-2018-8539

Name of the Vulnerable Software and Affected Versions National Payments Corporation of India BHIM application version 1.3 Description The issue concerns the custom keypad in the BHIM application, where the input element is accessible to the Accessibility service. This accessibility makes it easie...

PT-2018-8537

Name of the Vulnerable Software and Affected Versions National Payments Corporation of India BHIM application version 1.3 for Android Description The issue concerns the use of a four-digit passcode in the BHIM application, which may make it easier for attackers to gain access. Recommendations For...

CVE-2017-9820: Improper Authentication

The National Payments Corporation of India BHIM application 1.3 for Android uses a custom keypad for which the input element is available to the Accessibility service, which makes it easier for attackers to bypass authentication...

CVE-2017-9821: Use of Hard-coded Credentials

The National Payments Corporation of India BHIM application 1.3 for Android relies on three hardcoded strings AK-NPCIMB, IM-NPCIBM, and VK-NPCIBM for SMS validation, which makes it easier for attackers to bypass authentication...