CVE-2025-65820: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in Meatmeet Android Mobile Application 1.1.2.0. An exported activity can be spawned with the mobile application which opens a hidden page. This page, which is not available through the normal flows of the application, contains several devices which can be added to your...

CVE-2024-30059: Improper Access Control

Microsoft Intune for Android Mobile Application Management Tampering Vulnerability...

Genie Aladdin Connect Retrofit Garage Door Opener: Multiple Vulnerabilities

Rapid7, Inc. Rapid7 discovered vulnerabilities in Aladdin Connect retrofit kit garage door opener and Android mobile application produced by Genie. The affected products are: Aladdin Garage door smart retrofit kit, Model ALDCM Android Mobile application ALADDIN Connect, Version 5.65 Build 2075...

CVE-2023-5365: Improper Access Control

HP LIFE Android Mobile application is potentially vulnerable to escalation of privilege and/or information disclosure...

Authentication flaw

The Android mobile application Halo Home before 1.11.0 stores OAuth authentication and refresh access tokens in a clear text file. This file persists until the user logs out of the application and reboots the device. This vulnerability can allow an attacker to impersonate the legitimate user by...

Code injection

The Milwaukee ONE-KEY Android mobile application stores the master token in plaintext in the apk binary...

PT-2017-15708

Name of the Vulnerable Software and Affected Versions Milwaukee ONE-KEY Android mobile application affected versions not specified Description The issue concerns the storage of a master token in plaintext within the apk binary of the application. Recommendations At the moment, there is no...

PT-2017-15709

Name of the Vulnerable Software and Affected Versions Milwaukee ONE-KEY Android mobile application affected versions not specified Description The issue concerns the use of bearer tokens in the Milwaukee ONE-KEY Android mobile application. These tokens have an expiration period of one year and ca...