CVE-2024-8609 Improper Access Control in Oceanic Software's ValeApp

Insertion of Sensitive Information into Log File vulnerability in Oceanic Software ValeApp allows Query System for Information. This issue affects ValeApp: before v2.0.0...

CVE-2024-8609

ValeApp (Oceanic Software) prior to version 2.0.0 has a vulnerability that allows insertion of sensitive information into log files, which can enable a query system for information. Impact and exact exploit details are not fully provided in the sources, but PT-2024-39130 notes that versions befor...

CVE-2024-8609 Improper Access Control in Oceanic Software's ValeApp

Insertion of Sensitive Information into Log File vulnerability in Oceanic Software ValeApp allows Query System for Information. This issue affects ValeApp: before v2.0.0...

CVE-2024-8643 Session Hijacking in Oceanic Software's ValeApp

Session Fixation vulnerability in Oceanic Software ValeApp allows Brute Force, Session Hijacking. This issue affects ValeApp: before v2.0.0...

CVE-2024-8643

The CVE-2024-8643 entry relates to ValeApp from Oceanic Software and is supported by PT-2024-39148 details: versions prior to 2.0.0 are affected by a Session Fixation flaw that enables Brute Force and Session Hijacking. The vulnerability description explicitly ties the issue to the authentication...

CVE-2024-8643 Session Hijacking in Oceanic Software's ValeApp

Session Fixation vulnerability in Oceanic Software ValeApp allows Brute Force, Session Hijacking. This issue affects ValeApp: before v2.0.0...

CVE-2024-8644 Cleartext Storage of Sensitive Information in Oceanic Software's ValeApp

Cleartext Storage of Sensitive Information in a Cookie vulnerability in Oceanic Software ValeApp allows Protocol Manipulation, : JSON Hijacking aka JavaScript Hijacking. This issue affects ValeApp: before v2.0.0...

CVE-2024-8644 Cleartext Storage of Sensitive Information in Oceanic Software's ValeApp

Cleartext Storage of Sensitive Information in a Cookie vulnerability in Oceanic Software ValeApp allows Protocol Manipulation, : JSON Hijacking aka JavaScript Hijacking. This issue affects ValeApp: before v2.0.0...

ValeApp 安全漏洞

ValeApp is a mobile application from Oceanic Software for providing convenient and fast parking services. A security vulnerability previously existed in ValeApp version 2.0.0, which stemmed from the inclusion of a sensitive information disclosure issue...

ValeApp 安全漏洞

ValeApp is a mobile application from Oceanic Software for providing convenient and fast parking services. A security vulnerability previously existed in ValeApp version 2.0.0, which stemmed from the inclusion of a brute-force cracking issue...

Oceanic Software ValeApp 安全漏洞

ValeApp is a mobile application from Oceanic Software for providing convenient and fast parking services. A security vulnerability previously existed in Oceanic Software ValeApp version 2.0.0, which originated from the inclusion of a sensitive information leak that could lead to JavaScript...

ValeApp SQL注入漏洞

ValeApp is a mobile application from Oceanic Software for providing convenient and fast parking services. A SQL injection vulnerability exists in ValeApp prior to version 2.0.0, which stems from the inclusion of a SQL injection issue...

PT-2024-26126 · Oceanic · Oceanic

Name of the Vulnerable Software and Affected Versions: Oceanic versions prior to 1.10.4 Description: The issue arises from the lack of url-encoding for input to certain functions, such as Client.rest.channels.removeBan. This allows specially crafted input, like ../../../channels/id, to be...