Authentication flaw

An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pairing mode 0 Bluetooth LE security level The data being transmitted over the air is not encrypted. Adding to this, the data being sent to the smart band doesn't have any...

CVE-2020-11539

An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pairing mode 0 Bluetooth LE security level The data being transmitted over the air is not encrypted. Adding to this, the data being sent to the smart band doesn't have any...

CVE-2020-11539

CVE-2020-11539 affects Tata Sonata Smart SF Rush v1.12. The connected sources describe a Bluetooth Low Energy security flaw where OTA data is unencrypted and there is no authentication/signature verification, allowing an attacker to influence device parameters. Root cause: lack of pairing securit...

CVE-2020-11539: Missing Authentication for Critical Function

An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pairing mode 0 Bluetooth LE security level The data being transmitted over the air is not encrypted. Adding to this, the data being sent to the smart band doesn't have any...

PT-2020-12676

Name of the Vulnerable Software and Affected Versions Tata Sonata Smart SF Rush version 1.12 Description An issue has been identified where the smart band operates with no pairing, utilizing mode 0 Bluetooth LE security level. This results in unencrypted data transmission over the air. Furthermor...

Exploit for Missing Authentication for Critical Function in Titan Sf_Rush_Smart_Band_Firmware

CVE-2020-11539: Improper Access Control in Tata Sonata Smartba...

rush-sound.ru XSS vulnerability

Open Bug Bounty ID: OBB-719123 Description| Value ---|--- Affected Website:| rush-sound.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

rush-on-line.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-662856 Description| Value ---|--- Affected Website:| rush-on-line.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

In cryptoland, trust can be costly

While the legal status of cryptocurrencies and laws to regulate them continue to be hammered out, scammers are busy exploiting the digital gold rush. Besides hacking cryptocurrency exchanges, exploiting smart-contract vulnerabilities, and deploying malicious miners, cybercriminals are also...

rush-sound.ru XSS vulnerability

Open Bug Bounty ID: OBB-594630 Description| Value ---|--- Affected Website:| rush-sound.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

digitalrushexperience.com XSS vulnerability

Open Bug Bounty ID: OBB-549842 Description| Value ---|--- Affected Website:| digitalrushexperience.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Bus Rush - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Bus Rush published at the 'play' market has multiple vulnerabilities...

Doraemon Gadget Rush - Exported ContentProvider, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Doraemon Gadget Rush published at the 'play' market has multiple vulnerabilities...

Temple Rush - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Temple Rush published at the 'play' market has multiple vulnerabilities...

Strawberry Rush - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Strawberry Rush published at the 'play' market has multiple vulnerabilities...

Big Time Rush Jogos - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Big Time Rush Jogos published at the 'play' market has multiple vulnerabilities...

Garden Shop - Rush Hour! - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Garden Shop - Rush Hour! published at the 'play' market has multiple vulnerabilities...

Throne Rush - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Throne Rush published at the 'play' market has multiple vulnerabilities...

Ninja Rush - Dangerous filesystem permissions, GPL license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Ninja Rush published at the 'play' market has multiple vulnerabilities...

Super Ski Jump - Winter Rush - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Super Ski Jump - Winter Rush published at the 'play' market has multiple vulnerabilities...