852 matches found
TECNO com.transsion.carlcare 安全漏洞
TECNO com.transsion.carlcare is a mobile application from Transsion TECNO, a Chinese company. A security vulnerability exists in TECNO com.transsion.carlcare that stems from a flawed logic that could lead to account takeover...
CVE-2024-36557
The device ID is based on IMEI in Forever KidsWatch Call Me KW50 R36YDRA3PWGM7SV1.02019071516.19.24cobh and Forever KidsWatch Call Me 2 KW60 R36CWYDES4A292V1.02023.05.2422.49.44cobb. If a malicious user changes the IMEI to the IMEI of a unit they registered in the mobile app, it is possible to...
CVE-2021-40527
Exposure of senstive information to an unauthorised actor in the "com.onepeloton.erlich" mobile application up to and including version 1.7.22 allows a remote attacker to access developer files stored in an AWS S3 bucket, by reading credentials stored in plain text within the mobile application...
CVE-2022-41690
Improper access control in the IntelR Retail Edge Mobile iOS application before version 3.4.7 may allow an authenticated user to potentially enable escalation of privilege via local access...
Mattermost Mobile Apps Denial of Service Vulnerability (CNVD-2025-11092)
Mattermost Mobile Apps is a messaging mobile application from Mattermost USA. A denial of service vulnerability exists in Mattermost Mobile Apps that stems from a failure to properly validate post props, which can be exploited by an attacker to cause the application to crash...
Mattermost Mobile Denial of Service Vulnerability
Mattermost Mobile is a mobile application project, developed using the React Native framework, designed to provide a cross-platform iOS and Android client for Mattermost. Mattermost Mobile suffers from a denial of service vulnerability that stems from an inability to properly validate the proto...
TECNO com.transsion.carlcare 安全漏洞
TECNO com.transsion.carlcare is a mobile application from Transsion TECNO China. A security vulnerability exists in TECNO com.transsion.carlcare version 6.2.8.1, which originates from improper privilege settings and can lead to information disclosure...
CVE-2024-54681 Ossur Mobile Logic Application Command Injection
Multiple bash files were present in the application's private directory. Bash files can be used on their own, by an attacker that has already full access to the mobile platform to compromise the translations for the application...
CVE-2024-53683 Ossur Mobile Logic Application Exposure of Sensitive System Information to an Unauthorized Control Sphere
A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An attacker could use the information to disrupt normal use of the application by changing the translation files and thus weaken the integrity of normal use...
CVE-2021-39081 IBM Cognos Analytics Mobile information disclosure
IBM Cognos Analytics Mobile for Android 1.1.14 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...
CVE-2024-12603
A logic vulnerability in the the mobile application com.transsion.applock can lead to bypassing the application password...
CVE-2024-12603
A logic vulnerability in the the mobile application com.transsion.applock can lead to bypassing the application password...
CVE-2024-12603
A logic vulnerability in the the mobile application com.transsion.applock can lead to bypassing the application password...
CVE-2024-12603
CVE-2024-12603 is a logic vulnerability in the mobile application com.transsion.applock (TECNO/Transsion). The issue allows bypassing the application password. Public records point to a logic flaw in the app that can enable access without the correct password. Available concrete details mention T...
The vulnerability of the mobile device registration and mobile application deployment mechanism of Splunk Secure Gateway, a platform for operational analytics in Splunk Enterprise, arises from deficiencies in the deserialization mechanism. This allows attackers to execute arbitrary code.
The vulnerability of the mobile device registration and mobile application deployment mechanism of Splunk Secure Gateway, a platform for operational analytics in Splunk Enterprise, is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to...
CVE-2024-52876
Holy Stone Remote ID Module HSRID01, firmware distributed with the Drone Go2 mobile application before 1.1.8, allows unauthenticated "remote power off" actions in broadcast mode via multiple read operations on the ASTM Remote ID 0xFFFA GATT...
CVE-2024-52876
Holy Stone Remote ID Module HSRID01, firmware distributed with the Drone Go2 mobile application before 1.1.8, allows unauthenticated "remote power off" actions in broadcast mode via multiple read operations on the ASTM Remote ID 0xFFFA GATT...
CVE-2024-52876
Holy Stone Remote ID Module HSRID01, firmware distributed with the Drone Go2 mobile application before 1.1.8, allows unauthenticated "remote power off" actions in broadcast mode via multiple read operations on the ASTM Remote ID 0xFFFA GATT...
CVE-2024-52876
The CVE-2024-52876 entry pertains to Holy Stone Remote ID Module HSRID01 (firmware distributed with Drone Go2 before version 1.1.8). The issue allows unauthenticated remote power-off actions in broadcast mode via multiple read operations on the ASTM Remote ID (0xFFFA) GATT. Affected firmware vers...