CVE-2022-38771

The mobile application in Transtek Mojodat FAM Fixed Asset Management 2.4.6 allows remote attackers to send SCRIPT tags as injected input to the API request...

CVE-2022-38770

The mobile application in Transtek Mojodat FAM Fixed Asset Management 2.4.6 allows remote attackers to fetch other users' data upon a successful login request...

Authorization

The mobile application in Transtek Mojodat FAM Fixed Asset Management 2.4.6 allows remote attackers to bypass authorization...

Cross site request forgery (csrf)

The mobile application in Transtek Mojodat FAM Fixed Asset Management 2.4.6 allows remote attackers to fetch cleartext passwords upon a successful login request...

CVE-2022-38771

The CVE-2022-38771 entry concerns Transtek Mojodat FAM (Fixed Asset Management) v2.4.6 where remote attackers can inject SCRIPT tags via an API request. Documents indicate the issue arises from unsanitized input in the API endpoint, potentially impacting confidentiality, integrity, and availabili...

CVE-2022-38771

The mobile application in Transtek Mojodat FAM Fixed Asset Management 2.4.6 allows remote attackers to send SCRIPT tags as injected input to the API request...

CVE-2022-38770

The mobile application in Transtek Mojodat FAM Fixed Asset Management 2.4.6 allows remote attackers to fetch other users' data upon a successful login request...

CVE-2022-38769

The mobile application in Transtek Mojodat FAM Fixed Asset Management 2.4.6 allows remote attackers to fetch cleartext passwords upon a successful login request...

CVE-2022-38769

CVE-2022-38769 affects the Transtek Mojodat FAM (Fixed Asset Management) mobile app, version 2.4.6. The issue enables remote attackers to fetch cleartext passwords after a successful login request. Exploitation details in connected sources confirm affected software and the login-data exposure ris...

CVE-2022-38768

CVE-2022-38768 concerns the mobile app Transtek Mojodat FAM (Fixed Asset Management) 2.4.6, where the underlying issue allows remote attackers to bypass authorization. The available connected documents consistently describe this as an authorization bypass in the 2.4.6 mobile release. No concrete ...

CVE-2022-38768

The mobile application in Transtek Mojodat FAM Fixed Asset Management 2.4.6 allows remote attackers to bypass authorization...

PT-2022-24560 · Transtek · Transtek Mojodat Fam

Name of the Vulnerable Software and Affected Versions: Transtek Mojodat FAM Fixed Asset Management version 2.4.6 Description: The issue allows remote attackers to fetch cleartext passwords upon a successful login request. This is related to the mobile application in Transtek Mojodat FAM...

PT-2022-24559 · Transtek · Transtek Mojodat Fam

Name of the Vulnerable Software and Affected Versions: Transtek Mojodat FAM Fixed Asset Management version 2.4.6 Description: The issue allows remote attackers to bypass authorization in the mobile application. Recommendations: For version 2.4.6, consider restricting access to sensitive features...

Information disclosure

Insufficiently protected credentials in the IntelR Team Blue mobile application in all versions may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-29507

Insufficiently protected credentials in the IntelR Team Blue mobile application in all versions may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-29507

The CVE CVE-2022-29507 affects the Intel® Team Blue mobile application (all versions). The root cause is insufficient protection of credentials, potentially allowing an authenticated user to disclose information via local access. The issue is documented with a low CVSS base score (3.3/Low) and in...

Intel Datacenter Group Event 安全漏洞

Intel Datacenter Group Event is a data center group event consulting software from Intel Corporation USA. A security vulnerability exists in the Intel Datacenter Group Event iOS application. An attacker could exploit the vulnerability to obtain sensitive information...

SAP Authenticator 信息泄露漏洞

SAP Authenticator is a mobile application from SAP Germany that generates passwords for systems that require one-time password authentication. SAP Authenticator suffers from an information disclosure vulnerability. No information about this vulnerability is available at this time, so please stay...

CVE-2022-35291

Due to misconfigured application endpoints, SAP SuccessFactors attachment APIs allow attackers with user privileges to perform activities with admin privileges over the network. These APIs were consumed in the SF Mobile application for Time Off, Time Sheet, EC Workflow, and Benefits. On successfu...

Design/Logic Flaw

Due to misconfigured application endpoints, SAP SuccessFactors attachment APIs allow attackers with user privileges to perform activities with admin privileges over the network. These APIs were consumed in the SF Mobile application for Time Off, Time Sheet, EC Workflow, and Benefits. On successfu...