CVE-2020-8792

The OKLOK 3.1.1 mobile companion app for Fingerprint Bluetooth Padlock FB50 2.3 has an information-exposure issue. In the mobile app, an attempt to add an already-bound lock by its barcode reveals the email address of the account to which the lock is bound, as well as the name of the lock. Valid...

HardDrive 2.1 for iOS - Arbitrary File Upload Vulnerability

Exploit for iOS platform in category web applications Title: HardDrive 2.1 for iOS - Arbitrary File Upload Software: https://apps.apple.com/ch/app/harddrive/id383226784 Document Title: =============== HardDrive v2.1 iOS - Arbitrary File Upload Vulnerability Product & Service Introduction:...

Super Backup 2.0.5 for iOS - Directory Traversal

Title: Super Backup 2.0.5 for iOS - Directory Traversal Author: Vulnerability Laboratory Date: 2020-04-30 Software: https://apps.apple.com/us/app/super-backup-export-import/id1052684097 CVE: N/A Document Title: =============== Super Backup v2.0.5 iOS - Directory Traversal Vulnerability References...

Super Backup v2.0.5 iOS - Directory Traversal Vulnerability

Document Title: =============== Super Backup v2.0.5 iOS - Directory Traversal Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2200 Release Date: ============= 2020-04-29 Vulnerability Laboratory ID VL-ID: ==================================...

HardDrive v2.1 iOS - Arbitrary File Upload Vulnerability

Document Title: =============== HardDrive v2.1 iOS - Arbitrary File Upload Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2221 Release Date: ============= 2020-04-28 Vulnerability Laboratory ID VL-ID: ====================================...

AirDisk Pro app cross-site scripting vulnerability (CNVD-2020-25588)

AirDisk Pro app is a mobile application for managing AirDisk Pro wireless storage devices. The program supports document viewing, PDF reading, music playback, image viewing, text editing and file management. A cross-site scripting vulnerability exists in version 5.5.3 of the AirDisk Pro app for...

Folder Lock 3.4.5 Cross Site Scripting

Document Title: =============== Folder Lock v3.4.5 iOS - Multiple Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2210 Release Date: ============= 2020-04-20 Vulnerability Laboratory ID VL-ID: ==================================== 221...

Playable 9.18 Script Insertion / Arbitrary File Upload

Document Title: =============== Playable v9.18 iOS - Multiple Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2198 Release Date: ============= 2020-04-16 Vulnerability Laboratory ID VL-ID: ==================================== 2198...

File Transfer iFamily 2.1 - Directory Traversal Vulnerability

Exploit for iOS platform in category web applications Title: File Transfer iFamily 2.1 - Directory Traversal Software Link: http://www.dedecms.com/products/dedecms/downloads/ CVE: N/A Document Title: =============== File Transfer iFamily v2.1 - Directory Traversal Vulnerability Vulnerability Clas...

Swift File Transfer Mobile - Multiple Web Vulnerabilities

Document Title: =============== Swift File Transfer Mobile - Multiple Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2205 Release Date: ============= 2020-04-16 Vulnerability Laboratory ID VL-ID: ====================================...

File Transfer iFamily 2.1 Directory Traversal

Document Title: =============== File Transfer iFamily v2.1 - Directory Traversal Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2199 Release Date: ============= 2020-04-14 Vulnerability Laboratory ID VL-ID:...

AirDisk Pro 5.5.3 for iOS - Persistent Cross-Site Scripting

Title: AirDisk Pro 5.5.3 for iOS - Persistent Cross-Site Scripting Author: Vulnerability Laboratory Date: 2020-04-15 Vendor: http://www.app2pro.com Software Link: https://apps.apple.com/us/app/airdisk-pro-wireless-flash/id505904421 CVE: N/A Document Title: =============== AirDisk Pro v5.5.3 iOS -...

File Transfer iFamily 2.1 - Directory Traversal Vulnerability

Document Title: =============== File Transfer iFamily 2.1 - Directory Traversal Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2199 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-12128 CVE-ID: ======= CVE-2020-12128 Release Date...

CVE-2020-3142

A vulnerability in Cisco Webex Meetings Suite sites and Cisco Webex Meetings Online sites could allow an unauthenticated, remote attendee to join a password-protected meeting without providing the meeting password. The connection attempt must initiate from a Webex mobile application for either iO...

CVE-2020-3142 Cisco Webex Meetings Suite and Cisco Webex Meetings Online Unauthenticated Meeting Join Vulnerability

A vulnerability in Cisco Webex Meetings Suite sites and Cisco Webex Meetings Online sites could allow an unauthenticated, remote attendee to join a password-protected meeting without providing the meeting password. The connection attempt must initiate from a Webex mobile application for either iO...

CVE-2020-3142 Cisco Webex Meetings Suite and Cisco Webex Meetings Online Unauthenticated Meeting Join Vulnerability

A vulnerability in Cisco Webex Meetings Suite sites and Cisco Webex Meetings Online sites could allow an unauthenticated, remote attendee to join a password-protected meeting without providing the meeting password. The connection attempt must initiate from a Webex mobile application for either iO...

Cisco Webex Meetings Suite and Cisco Webex Meetings Online Unauthenticated Meeting Join Vulnerability

A vulnerability in Cisco Webex Meetings Suite sites and Cisco Webex Meetings Online sites could allow an unauthenticated, remote attendee to join a password-protected meeting without providing the meeting password. The connection attempt must initiate from a Webex mobile application for either iO...

CVE-2020-3940

CVE-2020-3940 affects VMware Workspace ONE SDK and dependent mobile applications. The root cause is improper handling of certificate verification failures when SSL Pinning is enabled, leading to a potential information disclosure. The CVSSv3.1 base score is 5.9 (confidentiality impact HIGH, no in...

VMware Workspace ONE SDK and dependent mobile application updates address sensitive information disclosure vulnerability (CVE-2020-3940)

3. VMware Workspace ONE SDK and dependent mobile application updates address sensitive information disclosure vulnerability CVE-2020-3940 VMware Workspace ONE SDK and dependent mobile applications do not properly handle certificate verification failures if SSL Pinning has been enabled in the...

Default credentials

In the PowerSchool Mobile application 1.1.8 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat...