22 matches found
CVE-2021-32612: Cleartext Transmission of Sensitive Information
The VeryFitPro com.veryfit2hr.second application 3.2.8 for Android does all communication with the backend API over cleartext HTTP. This includes logins, registrations, and password change requests. This allows information theft and account takeover via network sniffing...
8.1CVSS5.8AI score0.01094EPSS
SaveExploits3References2
VeryFitPro 加密问题漏洞
VeryFitPro is a powerful health management software from China's Shenzhen Aidu Technology Co., Ltd. that needs to be used with the same brand of smart bracelet, using the app users can view the number of steps taken, calories burned, sleep quality and other information in real time. There is an...
8.1CVSS7.7AI score0.01094EPSS
SaveExploits3References5
20