CVE-2017-8865

Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 do not provide sufficient protections against capture-replay attacks, allowing an attacker on the network to replay VoIP traffic between a Dino device and remote server to any other Dino device...

CVE-2017-8865

CVE-2017-8865 affects Elemental Path’s CogniToys Dino, with firmware version 0.0.794 and earlier. The vulnerability allows an attacker on the network to replay VoIP traffic between a Dino device and a remote server to another Dino device, indicating a capture-replay flaw in the Dino’s communicati...

CVE-2017-8866

Elemental Path's CogniToys Dino smart toys through firmware version 0.0.794 share a fixed small pool of hardcoded keys, allowing a remote attacker to use a different Dino device to decrypt VoIP traffic between a child's Dino and remote server...

Elemental Heroes - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Elemental Heroes published at the 'play' market has multiple vulnerabilities...

エレメンタルストーリー - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application エレメンタルストーリー published at the 'play' market has multiple vulnerabilities...

Elemental Kingdoms (CCG) - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Elemental Kingdoms CCG published at the 'play' market has multiple vulnerabilities...

RPG Elemental Knights(3D MMO) - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application RPG Elemental Knights3D MMO published at the 'play' market has multiple vulnerabilities...

Elemental Software CartWIZ 1.20 - Multiple SQL Injections

Elemental Software CartWIZ 1.20 - Multiple SQL Injections source: https://www.securityfocus.com/bid/14180/info CartWIZ is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...