EUVD-2017-18734

Malware in sbrugna...

EUVD-2017-18733

Malware in sbrugna...

EUVD-2017-18736

Malware in sbrugna...

Mobile payment app BHIM leaked financial data of 7 million Indians

By Waqas Bharat Interface for Money BHIM, India’s emerging new e-payments platform has... This is a post from HackRead.com Read the original post: Mobile payment app BHIM leaked financial data of 7 million Indians...

Unspecified Vulnerability in BHIM application for Android

BHIM application for Android is an Android platform based mobile payment application by National Payments India. A security vulnerability exists in National Payments Corporation in version 1.3 of the India BHIM application for Android-based platform, which stems from the program's use of a...

Unspecified vulnerability in BHIM application for Android (CNVD-2019-41445)

BHIM application for Android is an Android platform based mobile payment application by National Payments India. A security vulnerability exists in National Payments Corporation in version 1.3 of the India BHIM application for Android-based platform, which stems from the program not properly...

Unspecified vulnerability in BHIM application for Android (CNVD-2019-41446)

BHIM application for Android is an Android platform based mobile payment application by National Payments India. A security vulnerability exists in National Payments Corporation in version 1.3 of the India BHIM application for Android-based platform. An attacker can exploit the vulnerability to...

Unspecified vulnerability in BHIM application for Android (CNVD-2019-41447)

BHIM application for Android is an Android platform based mobile payment application by National Payments India. A security vulnerability exists in the National Payments Corporation in version 1.3 of the India BHIM application for Android-based platform, which stems from the program's reliance on...

CVE-2017-9821

The National Payments Corporation of India BHIM application 1.3 for Android relies on three hardcoded strings AK-NPCIMB, IM-NPCIBM, and VK-NPCIBM for SMS validation, which makes it easier for attackers to bypass authentication...

CVE-2017-9820

The National Payments Corporation of India BHIM application 1.3 for Android uses a custom keypad for which the input element is available to the Accessibility service, which makes it easier for attackers to bypass authentication...

CVE-2017-9819

The National Payments Corporation of India BHIM application 1.3 for Android does not properly restrict use of the OTP feature, which makes it easier for attackers to bypass authentication...

Design/Logic Flaw

The National Payments Corporation of India BHIM application 1.3 for Android relies on a four-digit passcode, which makes it easier for attackers to obtain access...

CVE-2017-9818

The National Payments Corporation of India BHIM application 1.3 for Android relies on a four-digit passcode, which makes it easier for attackers to obtain access...

CVE-2017-9819

The National Payments Corporation of India BHIM application 1.3 for Android does not properly restrict use of the OTP feature, which makes it easier for attackers to bypass authentication...

CVE-2017-9820

The National Payments Corporation of India BHIM application 1.3 for Android uses a custom keypad for which the input element is available to the Accessibility service, which makes it easier for attackers to bypass authentication...

Authentication flaw

The National Payments Corporation of India BHIM application 1.3 for Android relies on three hardcoded strings AK-NPCIMB, IM-NPCIBM, and VK-NPCIBM for SMS validation, which makes it easier for attackers to bypass authentication...

CVE-2017-9818

The National Payments Corporation of India BHIM application 1.3 for Android relies on a four-digit passcode, which makes it easier for attackers to obtain access...

CVE-2017-9820

The National Payments Corporation of India BHIM application 1.3 for Android uses a custom keypad for which the input element is available to the Accessibility service, which makes it easier for attackers to bypass authentication...

CVE-2017-9821

The National Payments Corporation of India BHIM application 1.3 for Android relies on three hardcoded strings AK-NPCIMB, IM-NPCIBM, and VK-NPCIBM for SMS validation, which makes it easier for attackers to bypass authentication...

CVE-2017-9819

Affected software: National Payments Corporation of India BHIM Android app, version 1.3. Vulnerability: OTP feature is not properly restricted, enabling authentication bypass. Root cause (as stated): improper restriction of OTP functionality. Impact: attackers could bypass authentication (per the...