CVE-2015-5632

The runtime engine in the Newphoria applican framework before 1.12.3 for Android and before 1.12.2 for iOS allows attackers to bypass a whitelist.xml URL whitelist protection mechanism and obtain API access via unspecified vectors...

CVE-2015-5637

The CVE-2015-5637 entry concerns the Android Photon application by Newphoria. Affected software: Photon for Android prior to version 1.2. The root cause is a bypass of the URL whitelist protection, enabling attackers to obtain API access via unspecified vectors. Documented impact indicates that a...

PT-2015-6996

Name of the Vulnerable Software and Affected Versions Newphoria application framework versions prior to 1.12.3 for Android Newphoria application framework versions prior to 1.12.2 for iOS Description The issue allows attackers to bypass the whitelist.xml URL whitelist protection mechanism,...

CVE-2015-5632: Undefined Security Weakness

The runtime engine in the Newphoria applican framework before 1.12.3 for Android and before 1.12.2 for iOS allows attackers to bypass a whitelist.xml URL whitelist protection mechanism and obtain API access via unspecified vectors...

PT-2015-7001

Name of the Vulnerable Software and Affected Versions Newphoria Photon versions prior to 1.2 Description The issue allows attackers to bypass a URL whitelist protection mechanism and obtain API access. Recommendations For versions prior to 1.2, update to version 1.2 or later to resolve the issue...

PT-2015-6999

Name of the Vulnerable Software and Affected Versions Newphoria Koritore versions prior to 1.1 Description The issue allows attackers to bypass a URL whitelist protection mechanism and obtain API access. Recommendations For versions prior to 1.1, update to version 1.1 or later to resolve the issu...

PT-2015-7000

Name of the Vulnerable Software and Affected Versions Newphoria Reversi versions prior to 1.0.3 for Android Newphoria Reversi versions prior to 1.2 for iOS Description The issue allows attackers to bypass a URL whitelist protection mechanism and obtain API access. Recommendations For Android...

CVE-2015-5636: Undefined Security Weakness

The Newphoria Reversi application before 1.0.3 for Android and before 1.2 for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors...

CVE-2015-5633: Undefined Security Weakness

The Newphoria Auction Camera application for iOS and before 1.2 for Android allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors...

PT-2015-6998

Name of the Vulnerable Software and Affected Versions Newphoria MEGAPHONE MUSIC versions prior to 1.1 Description The issue allows attackers to bypass a URL whitelist protection mechanism and obtain API access. Recommendations For versions prior to 1.1, update to version 1.1 or later to resolve t...

CVE-2015-5634: Undefined Security Weakness

The Newphoria MEGAPHONE MUSIC application before 1.1 for Android and before 1.1 for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors...

CVE-2015-5635: Undefined Security Weakness

The Newphoria Koritore application before 1.1 for Android and before 1.1 for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors...

PT-2015-6997

Name of the Vulnerable Software and Affected Versions Newphoria Auction Camera versions prior to 1.2 for Android Newphoria Auction Camera for iOS Description The issue allows attackers to bypass a URL whitelist protection mechanism and obtain API access. Recommendations For Newphoria Auction Came...

CVE-2015-5637: Undefined Security Weakness

The Newphoria Photon application before 1.2 for Android allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors...

Code injection

The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.6.0 and earlier for Android and 1.0.2 and earlier for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors...

CVE-2015-5629

The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.6.0 and earlier for Android and 1.0.2 and earlier for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors...

CVE-2015-5629

The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.6.0 and earlier for Android and 1.0.2 and earlier for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors...

CVE-2015-5629

The CVE pertains to the NTT Broadband Platform Japan Connected-free Wi‑Fi application (Android up to 1.6.0 and iOS up to 1.0.2). Multiple connected sources confirm a vulnerability that allows bypassing the URL whitelist protection and may enable arbitrary API execution or loading of arbitrary pag...

CVE-2015-5629: Undefined Security Weakness

The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.6.0 and earlier for Android and 1.0.2 and earlier for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors...

PT-2015-6993

Name of the Vulnerable Software and Affected Versions NTT Broadband Platform Japan Connected-free Wi-Fi application versions 1.6.0 and earlier for Android NTT Broadband Platform Japan Connected-free Wi-Fi application versions 1.0.2 and earlier for iOS Description The issue allows attackers to...