CVE-2024-23453

creationtimestamp| type| source ---|---|--- 2024-01-24 01:27:07+00:00| seen| https://t.me/ctinow/172463 2024-02-17 17:16:16+00:00| seen| https://t.me/ctinow/186979...

CVE-2024-23453

Android Spoon application version 7.11.1 to 8.6.0 uses hard-coded credentials, which may allow a local attacker to retrieve the hard-coded API key when the application binary is reverse-engineered. This API key may be used for unexpected access of the associated service...

CVE-2024-23453

Android Spoon app (versions 7.11.1–8.6.0) contains a hard-coded API key that can be retrieved by reverse-engineering the binary, enabling unauthorized access to an external service. Root cause: embedded credentials in the mobile app. Impact: local attacker could obtain the API key; impact consist...