1855 matches found
Bitpie application for Android and iOS information disclosure vulnerability
Bitpie application for Android is an Android-based application for managing and trading multiple blockchain assets.Bitpie application for iOS is its iOS-based version. A security vulnerability exists in versions 3.2.4 and earlier of the Bitpie application for Android and iOS based platforms, whic...
eVestigator Forensic PenTester Remote Code Execution Vulnerability
eVestigator Forensic PenTester is an Android App. A remote code execution vulnerability exists in eVestigator Forensic PenTester. An attacker can exploit this vulnerability to execute arbitrary code in the context of the application by performing a man-in-the-middle attack...
Multiple Vulnerabilities in Android App for US LinkSys Routers
Linksys Smart Wi-Fi Routers are smart Wi-Fi routers. An arbitrary user registration, information disclosure, and SMS bombing vulnerability exists in the US LinkSys Routers Android APP. Attackers use the vulnerability to register any email address and can send unlimited reset password emails,...
CVE-2017-3776
Lenovo Help Android mobile app versions earlier than 6.1.2.0327 allowed information to be transmitted over an HTTP channel, permitting others observing the channel to potentially see this information...
HPSBGN03565 rev.1 - Unsecure (http) Transactions in Isaac Mizrahi Smartwatch Mobile App
Potential Security Impact Potential theft of credentials and UI hijack Source: HP, HP Product Security Response Team PSRT Reported by: Jerry Decime VULNERABILITY SUMMARY A potential security vulnerability caused by the use of unsecure http transactions during login has been identified with early...
CVE-2018-0553
The iRemoconWiFi App for Android version 4.1.7 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The iRemoconWiFi App for Android version 4.1.7 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
MDX Toolkit - error when wrapping android app - APKTool Error
MDX Toolkit version: 10.8.5 on-prem and cloud. -This article explains how to fix the issue on the on-prem version- When MDX Toolkit is trying to re-compile it shows the following error: "Re-compile the app using APKTool 2.3.1 and it fails" Complete log of the error is shown below: De-Compiling th...
iRemoconWiFi App for Android fails to verify SSL server certificates
Overview iRemoconWiFi App for Android provided by Glamo Inc. fails to verify SSL server certificates. Seigo Yamamoto of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A man-in-the-middle attac...
An Android App for RFID Card Cloning: Project Walrus
Walrus is an Android app that simplifies using several existing contactless card cloning devices during red team engagements and physical security assessments. It offers a common interface and database for storing cloned cards. Currently, Walrus supports the industry standard Proxmark 3, Chameleo...
Netflix Opens Public Bug Bounty Program with $15K Payout Cap
Netflix expanded its bug bounty program on Wednesday opening it up to any white hat hacker and at the same time increased the top reward to $15,000. The bug bounty program, managed by Bugcrowd, now allows any registered hackers to scour Netflix vast mobile, cloud and software platform for minor a...
Upgrade Checksum Vulnerability in NetEase Cloud Classroom Android App
Netease Cloud Classroom app is a professional knowledge learning software. An upgrade checksum vulnerability exists in NetEase Cloud Classroom Android App. Allow attackers to exploit the vulnerability to replace the upgrade packet to induce users to download malware...
CVE-2017-5250
In version 1.9.7 and prior of Insteon's Insteon for Hub Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner...
CVE-2017-5249
In version 6.1.0.19 and prior of Wink Labs's Wink - Smart Home Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner...
CVE-2017-5250
Technical details about CVE-2017-5250 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2017-5249
CVE-2017-5249 affects Wink Labs’ Wink – Smart Home Android app (version 6.1.0.19 and earlier). The root cause is insecure storage of the OAuth token used to authorize user access, potentially exposing sensitive information. The provided sources describe the vulnerability and its existence but do ...
CVE-2017-5249
In version 6.1.0.19 and prior of Wink Labs's Wink - Smart Home Android app, the OAuth token used by the app to authorize user access is not stored in an encrypted and secure manner...
CVE-2017-16835
The "Photo,Video Locker-Calculator" application 12.0 for Android has android:allowBackup="true" in AndroidManifest.xml, which allows attackers to obtain sensitive cleartext information via an "adb backup '-f smart.calculator.gallerylock'" command...
Place Life Travel Photography Software Android App Has Logic Flaw Vulnerability
Place is a photo socialization software based on location tagging. Place life travel photography software Android APP has a brute force vulnerability that can be exploited by attackers to blast account password information...