113 matches found
CVE-2019-9939
The SHAREit application before 4.0.36 for Android allows a remote attacker on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated to bypass authentication by trying to fetch a non-existing page. When the non-existing page is requeste...
CVE-2019-9939
The CVE describes an authentication bypass in the SHAREit Android app prior to version 4.0.36. When a user initiates file transfer, an attacker on the same network or on public open hotspots created by the app can request a non-existent page; the app responds with HTTP 200 and an empty page and, ...
CVE-2019-9939
The SHAREit application before 4.0.36 for Android allows a remote attacker on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated to bypass authentication by trying to fetch a non-existing page. When the non-existing page is requeste...
CVE-2019-9938
The CVE-2019-9938 issue affects the Android SHAREit app prior to version 4.0.42. A remote attacker on the same network or connected to public open hotspots created by the app can download arbitrary files from the device (contacts, photos, videos, sound clips, etc.) after authenticating as a recog...
CVE-2019-9938
The SHAREit application before 4.0.42 for Android allows a remote attacker on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated to download arbitrary files from the device including contacts, photos, videos, sound clips, etc. The...
CVE-2019-9939: Undefined Security Weakness
The SHAREit application before 4.0.36 for Android allows a remote attacker on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated to bypass authentication by trying to fetch a non-existing page. When the non-existing page is requeste...
PT-2019-19950
Name of the Vulnerable Software and Affected Versions SHAREit version prior to 4.0.42 Description The issue allows a remote attacker, who is authenticated as a "recognized device" and is on the same network or joins public "open" Wi-Fi hotspots created by the application when file transfer is...
PT-2019-19951
Name of the Vulnerable Software and Affected Versions SHAREit version prior to 4.0.36 Description The issue allows a remote attacker to bypass authentication by requesting a non-existing page, which results in the application responding with a 200 status code and an empty page, and adding the...
CVE-2019-9938: Authorization Bypass Through User-Controlled Key
The SHAREit application before 4.0.42 for Android allows a remote attacker on the same network or joining public "open" Wi-Fi hotspots created by the application when file transfer is initiated to download arbitrary files from the device including contacts, photos, videos, sound clips, etc. The...
Severe Flaws in SHAREit Android App Let Hackers Steal Your Files
Security researchers have discovered two high-severity vulnerabilities in the SHAREit Android app that could allow attackers to bypass device authentication mechanism and steal files containing sensitive from a victim's device. With over 1.5 billion users worldwide, SHAREit is a popular file...
Severe Flaws in SHAREit Android App Let Hackers Steal Your Files
Security researchers have discovered two high-severity vulnerabilities in the SHAREit Android app that could allow attackers to bypass device authentication mechanism and steal files containing sensitive from a victim's device. With over 1.5 billion users worldwide, SHAREit is a popular file...
High-Severity SHAREit App Flaws Open Files for the Taking
Two high-severity flaws in the SHAREit Android app allow an attacker to bypass the file transfer application’s device authentication mechanism – and ultimately download content and arbitrary files from the victim’s device, along with a raft of data such as Facebook tokens and cookies. SHAREit is ...
order.shareit.com XSS vulnerability
Open Bug Bounty ID: OBB-689647 Description| Value ---|--- Affected Website:| order.shareit.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...
secure.shareit.com XSS vulnerability
Open Bug Bounty ID: OBB-385517 Description| Value ---|--- Affected Website:| secure.shareit.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
SHAREit for Android Vulnerabilities
Lenovo Security Advisory: LEN-6421 Potential Impact: Users with older Android versions may be vulnerable to remote code execution, or a UXSS attack and users with any Android version may be vulnerable to an intent scheme attack. Severity: High Lenovo SHAREit Application: End of Lenovo Support...
SHAREit for Android Vulnerabilities - Lenovo Support US
No description provided...
SHAREit for Windows and Android Vulnerabilities - Lenovo Support US
No description provided...
SHAREit for Windows and Android Vulnerabilities
Lenovo Security Advisory: LEN-4058 Potential Impact: Remote browsing of file system, and unauthorized access of files on Windows and Android denial of service attack that could crash the Windows SHAREit client Severity: High Lenovo SHAREit Application: End of Lenovo Support Summary: Vulnerabiliti...
SHAREit - Transfer & Share - Base64 encoded String, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application SHAREit - Transfer & Share published at the 'play' market has multiple vulnerabilities...
Lenovo SHAREit Cross-Site Scripting Vulnerability
Lenovo SHAREit 茄子快传 on Android is a set of file-sharing software based on the Android platform by the Chinese company Lenovo Lenovo. A cross-site scripting vulnerability exists in versions of Lenovo SHAREit prior to 3.5.98ww, which is based on the Android platform prior to version 4.4. A remote...