mobile.060608.it Cross Site Scripting vulnerability OBB-3936870

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WPMobile.App — Android and iOS Mobile Application < 11.42 - Reflected Cross-Site Scripting

Description The WPMobile.App — Android and iOS Mobile Application plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 11.41 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

PT-2024-5482 · Microsoft · Groupme

Name of the Vulnerable Software and Affected Versions: GroupMe affected versions not specified Description: The issue is related to improper access control in the GroupMe mobile application, allowing an unauthenticated attacker to elevate privileges over a network. This can be achieved by...

HP Advance Mobile Application – Potential Information Disclosure

HP Advance Mobile Applications for iOS and Android are potentially vulnerable to information disclosure when using an outdated version of the application via mobile devices. Update your application...

The vulnerability of Microsoft Intune Mobile Application Management for Android, related to access control deficiencies, allows a malicious individual to gain unauthorized access to protected information based on the privileges of the target device.

The vulnerability of Microsoft Intune Mobile Application Management for Android relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information based on privileges of the target device...

CVE-2024-4988

The mobile application com.transsion.videocallenhancer interface has improper permission control, which can lead to the risk of private file leakage...

CVE-2024-4988

The CVE-2024-4988 entry concerns the mobile app com.transsion.videocallenhancer, where improper permission control in the app interface can lead to private file leakage. Red Hat/NVD/CVE references align on a vulnerability in the Transsion TECNO mobile software stack, with public detail indicating...

CVE-2024-4988 Improper permission control in com.transsion.videocallenhancer

The mobile application com.transsion.videocallenhancer interface has improper permission control, which can lead to the risk of private file leakage...

CVE-2024-4988 Improper permission control in com.transsion.videocallenhancer

The mobile application com.transsion.videocallenhancer interface has improper permission control, which can lead to the risk of private file leakage...

CVE-2024-30059

Microsoft Intune for Android Mobile Application Management Tampering Vulnerability...

CVE-2024-30059

Microsoft Intune for Android Mobile Application Management Tampering Vulnerability...

CVE-2024-30059

Technical details about CVE-2024-30059 are not provided in the connected documents. Available sources only note the vulnerability title and CVSS metrics; monitor for official advisories for affected versions, impact, and fixes.

CVE-2024-30059 Microsoft Intune for Android Mobile Application Management Tampering Vulnerability

...

Microsoft Intune for Android Mobile Application Management Tampering Vulnerability

...

PT-2024-3716 · Microsoft · Intune Mobile Application Management For Android

Name of the Vulnerable Software and Affected Versions: Microsoft Intune Mobile Application Management for Android affected versions not specified Description: The issue is related to inadequate access control in Microsoft Intune Mobile Application Management for Android, which can be exploited to...

Motorola Services Main 安全漏洞

Motorola Services Main is a mobile application service from Motorola USA. A security vulnerability exists in Motorola Services Main that stems from an incorrect export vulnerability that could allow a local attacker to write to a local database...

CVE-2024-2197

The Chirp Access app contains a hard-coded password, BEACONPASSWORD. An attacker within Bluetooth range could change configuration settings within the Bluetooth beacon, effectively disabling the application's ability to notify users when they are near a Beacon-enabled access point. This variable...

CVE-2024-2197 Chirp Systems Chirp Access Use of Hard-coded Password

The Chirp Access app contains a hard-coded password, BEACONPASSWORD. An attacker within Bluetooth range could change configuration settings within the Bluetooth beacon, effectively disabling the application's ability to notify users when they are near a Beacon-enabled access point. This variable...

CVE-2024-26132

Element Android is an Android Matrix Client. A third-party malicious application installed on the same phone can force Element Android, version 0.91.0 through 1.6.12, to share files stored under the files directory in the application's private data directory to an arbitrary room. The impact of th...

Improper access control

Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specific conditions could potentially enable a remote authenticated attacker to associate another user's MFA mobile application...