EUVD-2020-15794

Malware in sbrugna...

CVE-2020-36486

Swift File Transfer Mobile v1.1.2 and below was discovered to contain a cross-site scripting XSS vulnerability via the 'path' parameter of the 'list' and 'download' exception-handling...

CVE-2020-36502

Swift File Transfer Mobile v1.1.2 was discovered to contain a cross-site scripting XSS vulnerability via the devicename parameter which allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered as the device name itself...

CVE-2020-23038

CVE-2020-23038 affects Swift File Transfer Mobile v1.1.2 and earlier. A path traversal/info-disclosure vulnerability exists in the path parameter, triggered by an error caused by including non-existent path environment variables. The connected sources corroborate that an unauthorized attacker cou...

CVE-2020-23038

Swift File Transfer Mobile v1.1.2 and below was discovered to contain an information disclosure vulnerability in the path parameter. This vulnerability is exploited via an error caused by including non-existent path environment variables...

CVE-2020-36502

CVE-2020-36502 describes an XSS vulnerability in Swift File Transfer Mobile v1.1.2, caused by the devicename parameter. The issue allows an attacker to inject and execute arbitrary web scripts or HTML when the device name is crafted, as indicated by multiple connected sources. Documented details ...

Swift File Transfer Mobile 路径遍历漏洞

Swift File Transfer Mobile is an application by Kunal Mahajan Personal Developer. It is used to share installed applications, photos, files, folders and videos 8Mbps at high speed without using internet, data cable, mobile data, Wi-Fi, Nfc etc. A path traversal vulnerability exists in Swift File...

CVE-2020-36502: Improper Neutralization of Input During Web Page Generation

Swift File Transfer Mobile v1.1.2 was discovered to contain a cross-site scripting XSS vulnerability via the devicename parameter which allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered as the device name itself...

CVE-2020-23038: Improper Limitation of a Pathname to a Restricted Directory

Swift File Transfer Mobile v1.1.2 and below was discovered to contain an information disclosure vulnerability in the path parameter. This vulnerability is exploited via an error caused by including non-existent path environment variables...

PT-2021-12060

Name of the Vulnerable Software and Affected Versions: Swift File Transfer Mobile versions 1.1.2 and below Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited via the path parameter of the 'list' and 'download' exception-handling...

PT-2021-12070

Name of the Vulnerable Software and Affected Versions: Swift File Transfer Mobile version 1.1.2 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered as the devicename parameter, enabling cross-site scripting XSS attacks. This vulnerability...

PT-2021-10815

Name of the Vulnerable Software and Affected Versions Swift File Transfer Mobile versions 1.1.2 and below Description The issue is related to an information disclosure problem in the path parameter. It is triggered by an error that occurs when non-existent path environment variables are included...

CVE-2020-36486: Improper Neutralization of Input During Web Page Generation

Swift File Transfer Mobile v1.1.2 and below was discovered to contain a cross-site scripting XSS vulnerability via the 'path' parameter of the 'list' and 'download' exception-handling...