SunGrow iSolarCloud 安全漏洞

SunGrow iSolarCloud is an Android app for new energy power plant management from China SunGrow SunGrow. It is used for power plant data collection, monitoring, operation and maintenance and operation management. A security vulnerability exists in SunGrow iSolarCloud, which stems from an insecure...

CVE-2024-50691

SunGrow iSolarCloud Android app (V2.1.6.20241104 and earlier) is affected by missing SSL certificate validation, allowing MITM impersonation of the iSolarCloud server. The vulnerability enables an attacker to intercept or modify communications between the Android app and the server. CVSSv3.1 base...

CVE-2024-50684

SunGrow iSolarCloud Android app V2.1.6.20241017 and prior uses an insecure AES key to encrypt client data insufficient entropy. This may allow attackers to decrypt intercepted communications between the mobile app and iSolarCloud...

CVE-2024-34897

Nedis SmartLife android app v1.4.0 was discovered to contain an API key disclosure vulnerability...

CVE-2024-32876

NewPipe is an Android app for video streaming written in Java. It supports exporting and importing backups, as a way to let users move their data to a new device effortlessly. However, in versions 0.13.4 through 0.26.1, importing a backup file from an untrusted source could have resulted in...

CVE-2024-34897

Nedis SmartLife android app v1.4.0 was discovered to contain an API key disclosure vulnerability...

CVE-2024-34897

CVE-2024-34897 affects the Nedis SmartLife Android app v1.4.0, with an API key disclosure vulnerability that could expose credentials in transit/at rest. According to the initial description, the vulnerability has a CVSS v3.1 base score of 7.5 (HIGH), attack vector Network, required privileges No...

CVE-2024-36437

The com.enflick.android.TextNow aka TextNow: Call + Text Unlimited application 24.17.0.2 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.enflick.android.TextNow.activities.DialerActivity...

Google Bans 158,000 Malicious Android App Developer Accounts in 2024

Google said it blocked over 2.36 million policy-violating Android apps from being published to the Google Play app marketplace in 2024 and banned more than 158,000 bad developer accounts that attempted to publish such harmful apps. The tech giant also noted it prevented 1.3 million apps from...

Opera for Android has received Google Play’s Independent Security Review badge. Here’s what this means for your security

Security Opera for Android has received Google Play’s Independent Security Review badge. Here’s what this means for your security Share January 30th, 2025 Hey Opera users! You might have seen that Opera for Android has achieved a new security-focused milestone: If you search for Opera for Android...

CVE-2025-0575

Union Bank of India Vyom Android app (version 8.0.34) contains a vulnerability in the Rooting Detection component. Local manipulation can cause protection mechanism failure; attack complexity is high, and exploitation is deemed difficult, but a public exploit has been disclosed. Affected product:...

PT-2025-3966 · Union Bank Of India · Union Bank Of India Vyom

Name of the Vulnerable Software and Affected Versions: Union Bank of India Vyom version 8.0.34 Description: A problematic issue has been found in the Rooting Detection component of the Union Bank of India Vyom Android app. This issue can lead to a protection mechanism failure when manipulated...

CVE-2024-54125

Improper authorization in handler for custom URL scheme issue in "Shonen Jump+" App for Android versions prior to 4.0.0 allows an attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack...

"Shonen Jump+" App for Android fails to restrict custom URL schemes properly

Overview "Shonen Jump+" App for Android provided by SHUEISHA INC. provides the function to access a requested URL using Custom URL Scheme. The App does not restrict access to the function properly CWE-939 which may be exploited to direct the App to access any sites. Toshiki Iwasaki of Mitsui Buss...

Thinkware Cloud APK 安全漏洞

Thinkware Cloud APK is a free Android app from Thinkware that allows easy access to Thinkware Car Recorder. A security vulnerability exists in Thinkware Cloud APK version v4.3.46 that stems from a hard-coded decryption key in the application, which allows an attacker to access sensitive data and...

CVE-2024-11026

A vulnerability was found in Intelligent Apps Freenow App 12.10.0 on Android. It has been rated as problematic. Affected by this issue is some unknown functionality of the file ch/qos/logback/core/net/ssl/SSL.java of the component Keystore Handler. The manipulation of the argument...

CVE-2024-40239

An incorrect access control issue in Life: Personal Diary, Journal android app 17.5.0 allows a physically proximate attacker to escalate privileges via the fingerprint authentication function...

CVE-2024-40240

An incorrect access control issue in HomeServe Home Repair' android app - 3.3.4 allows a physically proximate attacker to escalate privileges via the fingerprint authentication function...

CVE-2024-40239

An incorrect access control issue in Life: Personal Diary, Journal android app 17.5.0 allows a physically proximate attacker to escalate privileges via the fingerprint authentication function...

CVE-2024-40239

The CVE-2024-40239 issue affects the Android app Life: Personal Diary, Journal (version 17.5.0). The vulnerability is described as an incorrect access control that could allow a physically proximate attacker to escalate privileges through the app’s fingerprint authentication function. The availab...