Cloudflare Public Bug Bounty: Completely remove VPN profile from locked WARP iOS cient.

It was possible for a user to delete VPN profile from WARP mobile client on iOS platform despite the Lock WARP switch feature being enabled on Zero Trust Platform. This led to bypassing policies and restriction enforced for enrolled devices by the Zero Trust platform. The issue was fixed in Warp...

Gallagher Command Centre Server Trust Management Issue Vulnerability (CNVD-2021-101145)

A security vulnerability exists in Gallagher Command Centre Server, a management system used by Gallagher New Zealand to monitor and manage infrastructure in buildings, which stems from incorrect validation of the cloud certificate chain in the mobile client. An attacker could exploit the...

CVE-2021-23155

Improper validation of the cloud certificate chain in Mobile Client allows man-in-the-middle attack to impersonate the legitimate Command Centre Server. This issue affects: Gallagher Command Centre Mobile Client for Android 8.60 versions prior to 8.60.065; version 8.50 and prior versions...

CVE-2021-23155

Improper validation of the cloud certificate chain in Mobile Client allows man-in-the-middle attack to impersonate the legitimate Command Centre Server. This issue affects: Gallagher Command Centre Mobile Client for Android 8.60 versions prior to 8.60.065; version 8.50 and prior versions...

Input validation

Improper validation of the cloud certificate chain in Mobile Client allows man-in-the-middle attack to impersonate the legitimate Command Centre Server. This issue affects: Gallagher Command Centre Mobile Client for Android 8.60 versions prior to 8.60.065; version 8.50 and prior versions...

CVE-2021-23155

Improper validation of the cloud certificate chain in Mobile Client allows man-in-the-middle attack to impersonate the legitimate Command Centre Server. This issue affects: Gallagher Command Centre Mobile Client for Android 8.60 versions prior to 8.60.065; version 8.50 and prior versions...

CVE-2021-23155

CVE-2021-23155 describes improper validation of the cloud certificate chain in Gallagher Command Centre Mobile Client for Android, causing a man-in-the-middle risk where an attacker could impersonate the Command Centre Server. The issue affects Android clients: 8.60 versions prior to 8.60.065 and...

Gallagher Command Centre Server 信任管理问题漏洞

A security vulnerability exists in Gallagher Command Centre Server, a management system used by Gallagher New Zealand to monitor and manage infrastructure in buildings, which stems from incorrect validation of the cloud certificate chain in the mobile client. An attacker could exploit the...

CVE-2021-41011

LINE client for iOS before 11.15.0 might expose authentication information for a certain service to external entities under certain conditions. This is usually impossible, but in combination with a server-side bug, attackers could get this information...

Zhejiang Unicom APP has logic flaw vulnerability

Zhejiang Unicom mobile client is a communication service app software. The software serves for the exchange and communication between the company and its customers, allowing users to check their Internet traffic and package usage at any time. Zhejiang Unicom APP has a logic flaw vulnerability,...

CVE-2021-1418 Cisco Jabber Desktop and Mobile Client Software Vulnerabilities

Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept protected network traffic,...

CVE-2020-27132 Cisco Jabber Desktop and Mobile Client Software Vulnerabilities

Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system OS with elevated privileges or gain access to sensitive information. For more information about these...

The vulnerability in the iOS client application of the Cisco Webex Teams software allows a perpetrator to compromise the integrity of protected information or cause service failures.

The vulnerability in the iOS client application of the Cisco Webex Teams collaboration software is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of protected information or cause service failures...

SAP NetWeaver Mobile Client Information Disclosure Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An information disclosure vulnerability exists in SAP NetWeaver Mobile Client. An attacker could exploit this...

JVN#56588965: Cybozu KUNAI for Android vulnerable to cross-site scripting

Cybozu KUNAI for Android is mobile client software for using Cybozu from an Android device. Cybozu KUNAI for Android contains a cross-site scripting vulnerability CWE-79 due to an issue in mobile view mode. Impact An arbitrary script may be executed on the user's web browser. Solution Update the...

Weak Password Vulnerability in Some Interfaces of China Mobile's Mobile Client

China Mobile Mobile Client is a mobile application launched by China Mobile. A weak password vulnerability exists in some interfaces of the China Mobile mobile client. Since the post data is obtained by reversing the apk using "Eastern=! @$%^&=World" as the password, using 3 des encryption, no...

Prezi Desktop Client - Persistent Cross Site Vulnerabilities

Document Title: =============== Prezi Desktop Client - Persistent Cross Site Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1834 View Video: https://www.youtube.com/watch?v=ugPQkXmcWYE Release Date: ============= 2016-04-25 Vulnerability Laboratory ID...

iPass Mobile Client Service Privilege Escalation

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class Metasploit3 'iPass Mobile Client Service Privilege Escalation', 'Description' = %q The named pipe, \IPEFSYSPCPIPE, can be accessed by normal users to interact with...

iPass Mobile Client Service Privilege Escalation

The named pipe, \IPEFSYSPCPIPE, can be accessed by normal users to interact with the iPass service. The service provides a LaunchAppSysMode command which allows to execute arbitrary commands as SYSTEM. This module requires Metasploit: https://metasploit.com/download Current source:...

iPass Mobile Client 2.4.2.15122 Privilege Escalation

Mogwai Security Advisory MSA-2015-03 ---------------------------------------------------------------------- Title: iPass Mobile Client service local privilege escalation Product: iPass Mobile Client Affected versions: iPass Mobile Client 2.4.2.15122 Newer version might be also affected Impact:...