862 matches found
CVE-2025-4378
CVE-2025-4378 affects the Ataturk University ATA-AOF Mobile Application. The root issue is cleartext transmission of sensitive information combined with hard-coded credentials, enabling authentication abuse and bypass. Affected versions are prior to 20.06.2025. CVSS‑3.1 metrics indicate a critica...
CVE-2025-4378 Hardcoded Credentials in Ataturk University's ATA-AOF Mobile Application
Cleartext Transmission of Sensitive Information, Use of Hard-coded Credentials vulnerability in Ataturk University ATA-AOF Mobile Application allows Authentication Abuse, Authentication Bypass.This issue affects ATA-AOF Mobile Application: before 20.06.2025...
Ataturk University ATA-AOF Mobile Application 安全漏洞
Ataturk University ATA-AOF Mobile Application is a mobile application from the Turkish company Ataturk University. A security vulnerability exists in Ataturk University ATA-AOF Mobile Application versions prior to 20.06.2025, which stems from plaintext transfers and hardcoded credentials, which...
PT-2025-26759
Name of the Vulnerable Software and Affected Versions: Ataturk University ATA-AOF Mobile Application versions prior to 20.06.2025 Description: The issue affects the Ataturk University ATA-AOF Mobile Application, allowing for authentication abuse and bypass due to cleartext transmission of sensiti...
Dual Protection Ring: User Profiling Via Differential Privacy and Service Dissemination through Private Information Retrieval
User profiling is crucial in providing personalised services, as it relies on analyzing user behaviour and preferences to deliver targeted services. This approach enhances user experience and promotes heightened engagement. Nevertheless, user profiling also gives rise to noteworthy privacy...
CVE-2025-6172
Permission vulnerability in the mobile application com.afmobi.boomplayer may lead to the risk of unauthorized operation...
CVE-2025-6172
Permission vulnerability in the mobile application com.afmobi.boomplayer may lead to the risk of unauthorized operation...
CVE-2025-6172
Permission vulnerability in the mobile application com.afmobi.boomplayer may lead to the risk of unauthorized operation...
CVE-2025-6172
Permission vulnerability in the mobile application com.afmobi.boomplayer may lead to the risk of unauthorized operation...
CVE-2025-6172
CVE-2025-6172 affects the mobile app com.afmobi.boomplayer (TECNO/Transfon). The connected sources indicate a permission vulnerability that may allow unauthorized operations with a high impact (CVSS v3.1: 9.8, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Root cause details are limited to general “permis...
PT-2025-25536 · Unknown · Com.Afmobi.Boomplayer
Name of the Vulnerable Software and Affected Versions: com.afmobi.boomplayer affected versions not specified Description: The issue concerns a permission vulnerability in the mobile application, which may lead to the risk of unauthorized operation. Recommendations: At the moment, there is no...
Location Tracking App for Foreigners in Moscow
Russia is proposing a rule that all foreigners in Moscow install a tracking app on their phones. Using a mobile application that all foreigners will have to install on their smartphones, the Russian state will receive the following information: Residence location Fingerprint Face photograph...
CVE-2024-10018
Improper permission control in the mobile application com.transsion.aivoiceassistant can lead to the launch of any unexported component...
CVE-2024-7697
Logical vulnerability in the mobile application com.transsion.carlcare may lead to user information leakage risks...
CVE-2024-56966
An issue in Shanghai Xuan Ting Entertainment Information & Technology Co., Ltd Qidian Reader iOS 5.9.384 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2024-4988
The mobile application com.transsion.videocallenhancer interface has improper permission control, which can lead to the risk of private file leakage...
CVE-2024-8039
Improper permission configurationDomain configuration vulnerability of the mobile application com.afmobi.boomplayer can lead to account takeover risks...
CVE-2024-6780
Improper permission control in the mobile application com.android.server.telecom may lead to user information security risks...