SHAREit for Windows and Android Vulnerabilities - Lenovo Support US

No description provided...

SHAREit for Android Vulnerabilities

Lenovo Security Advisory: LEN-6421 Potential Impact: Users with older Android versions may be vulnerable to remote code execution, or a UXSS attack and users with any Android version may be vulnerable to an intent scheme attack. Severity: High Lenovo SHAREit Application: End of Lenovo Support...

SHAREit - Transfer & Share - Base64 encoded String, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application SHAREit - Transfer & Share published at the 'play' market has multiple vulnerabilities...

Lenovo SHAREit Cross-Site Scripting Vulnerability

Lenovo SHAREit 茄子快传 on Android is a set of file-sharing software based on the Android platform by the Chinese company Lenovo Lenovo. A cross-site scripting vulnerability exists in versions of Lenovo SHAREit prior to 3.5.98ww, which is based on the Android platform prior to version 4.4. A remote...

Unspecified Vulnerability in Lenovo SHAREit

Lenovo SHAREit 茄子快传 on Android is a set of file-sharing software based on the Android platform by the Chinese company Lenovo Lenovo. An unspecified vulnerability exists in Lenovo SHAREit versions prior to 3.5.98ww, based on Android platforms prior to version 4.2. A remote attacker can exploit thi...

CVE-2016-4783

Cross-site scripting XSS vulnerability in Lenovo SHAREit before 3.5.98ww on Android before 4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS UXSS."...

CVE-2016-4783

Cross-site scripting XSS vulnerability in Lenovo SHAREit before 3.5.98ww on Android before 4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS UXSS."...

CVE-2016-4782

Lenovo SHAREit before 3.5.98ww on Android before 4.2 allows remote attackers to have unspecified impact via a crafted intent: URL, aka an "intent scheme URL attack."...

CVE-2016-4782

Lenovo SHAREit before 3.5.98ww on Android before 4.2 allows remote attackers to have unspecified impact via a crafted intent: URL, aka an "intent scheme URL attack."...

Cross site scripting

Cross-site scripting XSS vulnerability in Lenovo SHAREit before 3.5.98ww on Android before 4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS UXSS."...

Code injection

Lenovo SHAREit before 3.5.98ww on Android before 4.2 allows remote attackers to have unspecified impact via a crafted intent: URL, aka an "intent scheme URL attack."...

CVE-2016-4782

Lenovo SHAREit before 3.5.98ww on Android before 4.2 allows remote attackers to have unspecified impact via a crafted intent: URL, aka an "intent scheme URL attack."...

CVE-2016-4783

LENOVO SHAREit for Android before 4.4 is affected by a UXSS/XSS vulnerability (CVE-2016-4783) in versions prior to 3.5.98_ww, allowing remote script/HTML injection via unspecified vectors. The issue is tied to SHAREit for Android on affected Android OS versions; Lenovo’s Lenovo-6421 advisory and ...

CVE-2016-4782

The connected Lenovo advisory confirms CVE-2016-4782 affects SHAREit for Android versions older than 3.5.98_ww on devices running Android

CVE-2016-4783

Cross-site scripting XSS vulnerability in Lenovo SHAREit before 3.5.98ww on Android before 4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS UXSS."...

PT-2016-6137

Name of the Vulnerable Software and Affected Versions Lenovo SHAREit versions prior to 3.5.98 ww Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This is also referred to as "Universal XSS UXSS". Recommendations F...

CVE-2016-4783: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Lenovo SHAREit before 3.5.98ww on Android before 4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS UXSS."...

PT-2016-6136

Name of the Vulnerable Software and Affected Versions Lenovo SHAREit versions prior to 3.5.98 ww on Android versions prior to 4.2 Description The issue allows remote attackers to have an unspecified impact via a crafted intent: URL, also known as an "intent scheme URL attack." Recommendations For...

CVE-2016-4782: Improper Input Validation

Lenovo SHAREit before 3.5.98ww on Android before 4.2 allows remote attackers to have unspecified impact via a crafted intent: URL, aka an "intent scheme URL attack."...

Lenovo SHAREit Transfer Unencrypted Vulnerability

Lenovo SHAREit 茄子快传 is a set of file sharing software from the Chinese company Lenovo Lenovo. A transfer unencrypted vulnerability exists in Lenovo SHAREit for Windows before 3.2.0 and SHAREit for Android before 3.5.48ww, where the program transfers files in plaintext. A remote attacker can explo...