185 matches found
Huawei Wallet APP suffers from arbitrary gesture password change vulnerability
Huawei Wallet APP is a mobile shopping platform specially created by Huawei Huawei Wallet APP has a vulnerability of arbitrary change of gesture password. In the process of changing the gesture password of Huawei Wallet APP, the user's Huawei account needs to be verified. An attacker with root...
Chrome: bypass for download filetype blacklist, extension->native privesc
This bug report describes a vulnerability that can be used by an extension with some permissions to escalate to native code execution on Linux desktops if Java is installed. No user interaction is required. Chrome permits extensions with appropriate permissions "downloads" and "downloads. open" t...
chromium-browser: universal xss in chrome://downloads
Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to require a user gesture for powerful download operations, which allowed a remote attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted HTML page...
CVE-2017-5020
Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to require a user gesture for powerful download operations, which allowed a remote attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted HTML page...
189 Mail Client for Android Gesture Password Bypass Vulnerability
189 mailbox client is a new generation of mailbox service provided by China Telecom for C-network cell phone users and broadband users. A gesture password bypass vulnerability exists in the Android version of 189 Mail Client. The vulnerability allows attackers to use the gesture lock settings to...
WoMail Client for Android - Gesture Password Bypass Vulnerability
Wo Mailbox Client is an email sending and receiving application from China Unicom. A gesture password bypass vulnerability exists in the Android version of Vo Mail Client. The vulnerability allows attackers to bypass the gesture lock to send emails after using the gesture lock setting...
China Mobile 139 Mailbox Android V6.6.1 suffers from gesture password plaintext storage vulnerability
139 Mailbox APP is a general-purpose mailbox client launched by China Mobile. A vulnerability exists in the plaintext storage of gesture passwords in China Mobile 139 Mailbox Android V6.6.1. Since the user's gesture password storage is not encrypted, an attacker can utilize the vulnerability to...
MicroMail Email Client for Android - Gesture Password Insecure Storage Vulnerability
Micro Mail is a multi-mailbox management mobile client, mobile office tools for personal and business users. Micro Mail Mail Client for Android - There is an insecure storage vulnerability for gesture passwords, when a user uses a gesture password, the password is stored in plaintext and can be...
Upward Financial Management Android Client Gesture Lock Vulnerability
Upward Financial Management is a financial mobile software developed by Beijing Zendai Network Technology Co. Upward Financial Management Android client gesture lock vulnerability, an attacker can bypass a layer of authentication, may cause funds and information leakage harm...
Renren Android client gesture lock vulnerability
Renren focuses on personal mortgage business and is committed to providing professional financial information services for individuals and small and medium-sized enterprises. A vulnerability in the gesture lock of Renren Caixuan's Android client allows an attacker to bypass a layer of...
Gesture Lock Vulnerability in Your Money Management Android Client
You and I loan is an Internet financial investment platform. It provides users with convenient, low-threshold personal loans and investment services. There is a vulnerability in the gesture lock of YouMeLoan's financial management Android client, which allows attackers to bypass a layer of...
Money Nanny Android Client Gesture Lock Vulnerability
Money Nanny Android client is an Internet investment and wealth management platform focusing on auto finance. The Money Nanny Android client gesture lock vulnerability allows an attacker to bypass a layer of authentication without the need for a gesture password, potentially resulting in the loss...
China Telecom WingPay Android client gesture lock has design flaws
Wing Pay is a mobile payment service launched by China Telecom. A design vulnerability exists in the gesture lock of the Wing Pay Android client. By exploiting the vulnerability, an attacker can bypass the gesture lock security mechanism of the Wing Pay Android client and obtain users' private...
Gesture Lock Screen - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Gesture Lock Screen published at the 'play' market has multiple vulnerabilities...
Arbitrary Code Execution Vulnerability in Multiple Adobe Products (CNVD-2016-01538)
Adobe Acrobat DC, etc. are the United States of America Auduby Adobe company's products. Acrobat DC is a desktop PDF solution; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF.Classic and Continuous are Acrobat DC and Acrobat Reader DC product download center provides...
Arbitrary Code Execution Vulnerability in Multiple Adobe Products (CNVD-2016-01539)
Adobe Acrobat DC, etc. are the United States of America Auduby Adobe company's products. Acrobat DC is a desktop PDF solution; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF.Classic and Continuous are Acrobat DC and Acrobat Reader DC product download center to provid...
Arbitrary Code Execution Vulnerability in Multiple Adobe Products (CNVD-2016-01540)
Adobe Acrobat DC, etc. are the United States of America Auduby Adobe company's products. Acrobat DC is a desktop PDF solution; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF.Classic and Continuous are Acrobat DC and Acrobat Reader DC product download center provides...
CVE-2015-3213
The gesture handling code in Clutter before 1.16.2 allows physically proximate attackers to bypass the lock screen via certain 1 mouse or 2 touch gestures...
