EUVD-2014-5624

Malware in sbrugna...

CVE-2022-27247

onlinetolls in cdSoft Onlinetools-Smart Winhotel.MX 2021 allows an attacker to download sensitive information about any customer e.g., data of birth, full address, mail information, and phone number via GastKont Insecure Direct Object Reference...

CVE-2022-27247

Affected software: cdSoft Onlinetools-Smart Winhotel.MX 2021. The vulnerability is described as an Insecure Direct Object Reference (GastKont) that permits an attacker to download sensitive customer data (e.g., date of birth, full address, email, phone). Root cause indicated as improper exposure/...

PT-2022-18327

Name of the Vulnerable Software and Affected Versions cdSoft Onlinetools-Smart Winhotel.MX version 2021 Description The issue allows an attacker to download sensitive customer information, including date of birth, full address, mail information, and phone number, via an Insecure Direct Object...

CVE-2022-27247: Authorization Bypass Through User-Controlled Key

onlinetolls in cdSoft Onlinetools-Smart Winhotel.MX 2021 allows an attacker to download sensitive information about any customer e.g., data of birth, full address, mail information, and phone number via GastKont Insecure Direct Object Reference...

CVE-2014-5737

The CDsoft aka com.wCDSOFT application 0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The CDsoft aka com.wCDSOFT application 0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5737

The CDsoft aka com.wCDSOFT application 0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5737

The CVE-2014-5737 entry relates to the CDsoft (com.wCDSOFT) Android app version 0.2 failing to verify X.509 certificates from SSL servers. This creates susceptibility to man-in-the-middle attacks, enabling an attacker to spoof servers and access sensitive information via a crafted certificate. Co...

CVE-2014-5737: Undefined Security Weakness

The CDsoft aka com.wCDSOFT application 0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6722

Name of the Vulnerable Software and Affected Versions CDsoft aka com.wCDSOFT application version 0.2 for Android Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...