CVE-2024-7697

CVE-2024-7697 affects the mobile app com.transsion.carlcare and is described as a logical vulnerability that may lead to user information leakage. CVSS v3.1 base score 7.5 (HIGH) with Network attack vector, Low attack complexity, no privileges, no user interaction required. The connected document...

CVE-2024-7697 Logical vulnerability in com.transsion.carlcare

Logical vulnerability in the mobile application com.transsion.carlcare may lead to user information leakage risks...

The vulnerability of the GroupMe mobile messaging app, related to insufficient limits on authentication attempts, allows a hacker to elevate their privileges.

The vulnerability of the GroupMe mobile messaging app relates to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

CVE-2024-6780

Improper permission control in the mobile application com.android.server.telecom may lead to user information security risks...

CVE-2024-6780 Improper permission control in com.android.server.telecom

Improper permission control in the mobile application com.android.server.telecom may lead to user information security risks...

CVE-2024-6780 Improper permission control in com.android.server.telecom

Improper permission control in the mobile application com.android.server.telecom may lead to user information security risks...

CVE-2024-6780

The CVE-2024-6780 entry concerns Android’s com.android.server.telecom component with improper permission control that may expose user information. Connected sources (RH and NVD/NVD-like feeds) confirm the affected software module but do not provide additional technical specifics such as exact vul...

HCL Nomad Security Breach

HCL Nomad is an application for using and managing the Domino application development platform in mobile devices from HCL Corporation, USA. A security vulnerability exists in HCL Nomad that stems from a possible denial-of-service vulnerability in which the HCL Nomad server does not properly handl...

CVE-2024-30135

HCL DRYiCE AEX is potentially impacted by disclosure of sensitive information in the mobile application when a snapshot is taken...

CVE-2024-30135

HCL DRYiCE AEX is potentially impacted by disclosure of sensitive information in the mobile application when a snapshot is taken...

CVE-2024-30111

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breache...

CVE-2024-30111 Missing Root Detection vulnerability affects DRYiCE AEX v10

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breache...

CVE-2024-30111

The CVE-2024-30111 entry concerns HCL DRYiCE AEX mobile app with a Missing Root Detection vulnerability. Connected sources (EUVD-2024-28047, NVD/NVD-like records, CVE list) indicate the vulnerability affects DRYiCE AEX v10 and is tied to rooted-device bypass, enabling unauthorized access on roote...

CVE-2024-30111 Missing Root Detection vulnerability affects DRYiCE AEX v10

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breache...

TVS Motor TVS Connect Security Breach

TVS Motor TVS Connect is an application for TVS motorcycle owners from TVS Motor India. A security vulnerability exists in TVS Motor TVS Connect v4.6.0, IOS v5.0.0, which originates from insecure handling of RSA key pairs. An attacker could exploit the vulnerability to access sensitive informatio...

mobile.060608.it Cross Site Scripting vulnerability OBB-3936870

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WPMobile.App — Android and iOS Mobile Application < 11.42 - Reflected Cross-Site Scripting

Description The WPMobile.App — Android and iOS Mobile Application plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 11.41 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

PT-2024-5482 · Microsoft · Groupme

Name of the Vulnerable Software and Affected Versions: GroupMe affected versions not specified Description: The issue is related to improper access control in the GroupMe mobile application, allowing an unauthenticated attacker to elevate privileges over a network. This can be achieved by...

HP Advance Mobile Application – Potential Information Disclosure

HP Advance Mobile Applications for iOS and Android are potentially vulnerable to information disclosure when using an outdated version of the application via mobile devices. Update your application...

The vulnerability of Microsoft Intune Mobile Application Management for Android, related to access control deficiencies, allows a malicious individual to gain unauthorized access to protected information based on the privileges of the target device.

The vulnerability of Microsoft Intune Mobile Application Management for Android relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information based on privileges of the target device...