117 matches found
CVE-2019-9939
The SHAREit application before 4.0.36 for Android allows a remote attacker on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated to bypass authentication by trying to fetch a non-existing page. When the non-existing page is requeste...
Authentication flaw
The SHAREit application before 4.0.36 for Android allows a remote attacker on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated to bypass authentication by trying to fetch a non-existing page. When the non-existing page is requeste...
Code injection
The SHAREit application before 4.0.42 for Android allows a remote attacker on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated to download arbitrary files from the device including contacts, photos, videos, sound clips, etc. The...
CVE-2019-9939
The SHAREit application before 4.0.36 for Android allows a remote attacker on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated to bypass authentication by trying to fetch a non-existing page. When the non-existing page is requeste...
CVE-2019-9938
The SHAREit application before 4.0.42 for Android allows a remote attacker on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated to download arbitrary files from the device including contacts, photos, videos, sound clips, etc. The...
CVE-2019-9939
The CVE describes an authentication bypass in the SHAREit Android app prior to version 4.0.36. When a user initiates file transfer, an attacker on the same network or on public open hotspots created by the app can request a non-existent page; the app responds with HTTP 200 and an empty page and, ...
CVE-2019-9939
The SHAREit application before 4.0.36 for Android allows a remote attacker on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated to bypass authentication by trying to fetch a non-existing page. When the non-existing page is requeste...
CVE-2019-9938
The CVE-2019-9938 issue affects the Android SHAREit app prior to version 4.0.42. A remote attacker on the same network or connected to public open hotspots created by the app can download arbitrary files from the device (contacts, photos, videos, sound clips, etc.) after authenticating as a recog...
CVE-2019-9938
The SHAREit application before 4.0.42 for Android allows a remote attacker on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated to download arbitrary files from the device including contacts, photos, videos, sound clips, etc. The...
CVE-2019-9939: Undefined Security Weakness
The SHAREit application before 4.0.36 for Android allows a remote attacker on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated to bypass authentication by trying to fetch a non-existing page. When the non-existing page is requeste...
PT-2019-19950
Name of the Vulnerable Software and Affected Versions SHAREit version prior to 4.0.42 Description The issue allows a remote attacker, who is authenticated as a "recognized device" and is on the same network or joins public "open" Wi-Fi hotspots created by the application when file transfer is...
PT-2019-19951
Name of the Vulnerable Software and Affected Versions SHAREit version prior to 4.0.36 Description The issue allows a remote attacker to bypass authentication by requesting a non-existing page, which results in the application responding with a 200 status code and an empty page, and adding the...
CVE-2019-9938: Authorization Bypass Through User-Controlled Key
The SHAREit application before 4.0.42 for Android allows a remote attacker on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated to download arbitrary files from the device including contacts, photos, videos, sound clips, etc. The...
Severe Flaws in SHAREit Android App Let Hackers Steal Your Files
Security researchers have discovered two high-severity vulnerabilities in the SHAREit Android app that could allow attackers to bypass device authentication mechanism and steal files containing sensitive from a victim's device. With over 1.5 billion users worldwide, SHAREit is a popular file...
Severe Flaws in SHAREit Android App Let Hackers Steal Your Files
Security researchers have discovered two high-severity vulnerabilities in the SHAREit Android app that could allow attackers to bypass device authentication mechanism and steal files containing sensitive from a victim's device. With over 1.5 billion users worldwide, SHAREit is a popular file...
High-Severity SHAREit App Flaws Open Files for the Taking
Two high-severity flaws in the SHAREit Android app allow an attacker to bypass the file transfer application’s device authentication mechanism – and ultimately download content and arbitrary files from the victim’s device, along with a raft of data such as Facebook tokens and cookies. SHAREit is ...
order.shareit.com XSS vulnerability
Open Bug Bounty ID: OBB-689647 Description| Value ---|--- Affected Website:| order.shareit.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...
secure.shareit.com XSS vulnerability
Open Bug Bounty ID: OBB-385517 Description| Value ---|--- Affected Website:| secure.shareit.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
SHAREit for Windows and Android Vulnerabilities
Lenovo Security Advisory: LEN-4058 Potential Impact: Remote browsing of file system, and unauthorized access of files on Windows and Android denial of service attack that could crash the Windows SHAREit client Severity: High Lenovo SHAREit Application: End of Lenovo Support Summary: Vulnerabiliti...