CVE-2018-15355

Usage of SSLv2 and SSLv3 leads to transmitted data decryption in Kraftway 24F2XG Router firmware 3.5.30.1118...

Code injection

Usage of SSLv2 and SSLv3 leads to transmitted data decryption in Kraftway 24F2XG Router firmware 3.5.30.1118...

CVE-2018-15355

Usage of SSLv2 and SSLv3 leads to transmitted data decryption in Kraftway 24F2XG Router firmware 3.5.30.1118...

CVE-2018-15355

The CVE concerns Kraftway 24F2XG Router, firmware 3.5.30.1118, where use of SSLv2/SSLv3 enables decryption of transmitted data. According to connected sources, a remote attacker could perform a man‑in‑the‑middle to decrypt traffic. CVSS metrics indicate Confidentiality Impact High (CVSS‑3.0: base...

PT-2018-12989

Name of the Vulnerable Software and Affected Versions Kraftway 24F2XG Router firmware version 3.5.30.1118 Description The issue concerns the usage of outdated SSL protocols, specifically SSLv2 and SSLv3, which can lead to the decryption of transmitted data. Recommendations For firmware version...

CVE-2017-13106

Cheetahmobile CM Launcher 3D - Theme, wallpaper, Secure, Efficient, 5.0.3, 2017-09-19, Android application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key...

CVE-2017-13107

Live.me - live stream video chat, 3.7.20, 2017-11-06, Android application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key...

CVE-2017-13108

DFNDR Security Antivirus, Anti-hacking & Cleaner, 5.0.9, 2017-11-01, Android application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key...

CVE-2017-13104

Uber Technologies, Inc. UberEATS: Uber for Food Delivery, 1.108.10001, 2017-11-02, iOS application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key...

CVE-2017-13102

Gameloft Asphalt Xtreme: Offroad Rally Racing, 1.6.0, 2017-08-13, iOS application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key...

CVE-2017-13100 DistinctDev, Inc., The Moron Test, 6.3.1, 2017-05-04, iOS application uses a hard-coded key for encryption

DistinctDev, Inc., The Moron Test, 6.3.1, 2017-05-04, iOS application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key...

CVE-2017-13101 Musical.ly Inc., musical.ly - your video social network, 6.1.6, 2017-10-03, iOS application uses a hard-coded key for encryption

Musical.ly Inc., musical.ly - your video social network, 6.1.6, 2017-10-03, iOS application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key...

PT-2018-5476

Name of the Vulnerable Software and Affected Versions: musical.ly version 6.1.6 Description: The issue concerns the use of a hard-coded key for encryption in the iOS application. This means that data stored using this key can be decrypted by anyone who can access the key. Recommendations: For...

PT-2018-5475

Name of the Vulnerable Software and Affected Versions: The Moron Test version 6.3.1 Description: The issue concerns the use of a hard-coded key for encryption in the iOS application. This means that data stored using this key can be decrypted by anyone who can access the key. Recommendations: For...

PT-2018-5479

Name of the Vulnerable Software and Affected Versions: UberEATS version 1.108.10001 Description: The issue concerns the use of a hard-coded key for encryption in the iOS application. This means that data stored using this key can be decrypted by anyone who can access the key. Recommendations: For...

PT-2018-5482

Name of the Vulnerable Software and Affected Versions: Live.me version 3.7.20 Description: The Android application uses a hard-coded key for encryption, which means that data stored using this key can be decrypted by anyone able to access this key. Recommendations: For version 3.7.20, consider...

CVE-2017-13104: Use of Hard-coded Credentials

Uber Technologies, Inc. UberEATS: Uber for Food Delivery, 1.108.10001, 2017-11-02, iOS application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key...

PT-2018-5481

Name of the Vulnerable Software and Affected Versions: Cheetahmobile CM Launcher 3D - Theme, wallpaper, Secure, Efficient version 5.0.3 Description: The Android application uses a hard-coded key for encryption, which means that data stored using this key can be decrypted by anyone able to access...

CVE-2017-13100: Use of Hard-coded Credentials

DistinctDev, Inc., The Moron Test, 6.3.1, 2017-05-04, iOS application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key...

CVE-2017-13108: Use of Hard-coded Credentials

DFNDR Security Antivirus, Anti-hacking & Cleaner, 5.0.9, 2017-11-01, Android application uses a hard-coded key for encryption. Data stored using this key can be decrypted by anyone able to access this key...