Untrusted Search Path in Content - Edit Files / Companion - CVE-2020-4019

The file editing functionality in the Atlassian Companion App before version 1.0.0 allows local attackers to have the app run a different executable in place of the app's cmd.exe via a untrusted search path vulnerability. h5. Acknowledgements Credit for finding this vulnerability goes to Johannes...

Protection Mechanism Failure in file downloading in Companion - CVE-2020-4020

The file downloading functionality in the Atlassian Companion App before version 1.0.0 allows remote attackers, who control a Confluence Server instance that the Companion App is connected to, execute arbitrary .exe files via a Protection Mechanism Failure. h5. Acknowledgements Credit for finding...

Protection Mechanism Failure in file downloading in Companion - CVE-2020-4020

The file downloading functionality in the Atlassian Companion App before version 1.0.0 allows remote attackers, who control a Confluence Server instance that the Companion App is connected to, execute arbitrary .exe files via a Protection Mechanism Failure. h5. Acknowledgements Credit for finding...

KLA11746 Multiple vulnerabilities in Microsoft Apps

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. Unspecified Microsoft can be exploited remotely to gain privileges. 2. An elevation of privilege vulnerability in Microsoft...

Any Account Registration and Any Password Reset Vulnerabilities Exist in Anxiety Companion App

Anxious companion APP is a companion O2O service platform. There are arbitrary account registration and arbitrary password reset vulnerabilities in Anxin escort APP. Attackers can register any account and reset any password by capturing the verification code...

The Little Companion App has a logic design flaw

Little Companion APP is a mobile internet information platform specialized in picking up and dropping off children. There is a logical design vulnerability in Little Companion APP, after the attacker registers, the attacker can arbitrarily register users and arbitrarily reset passwords through th...

Companion - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Companion published at the 'play' market has multiple vulnerabilities...

CVE-2014-8921

The vulnerability CVE-2014-8921 affects the IBM Notes Traveler Companion for Windows Phone (versions 1.0 and 1.1 prior to 201411010515, as distributed in IBM Notes Traveler 9.0.1). The issue is an improper restriction on the number of executions of the automatic configuration option, which could ...