28 matches found
EUVD-2013-0715
Malware in sbrugna...
EUVD-2018-13136
Malware in sbrugna...
EUVD-2012-3950
Malware in sbrugna...
CVE-2013-0704
Directory traversal vulnerability in the GREE application before 1.3.3 for Android allows remote attackers to obtain sensitive information via a crafted URL, which is not properly handled during interaction with other applications...
CVE-2018-20582
The GREE+ aka com.gree.greeplus application 1.4.0.8 for Android suffers from Cross Site Request Forgery...
CVE-2012-4006
The GREE application before 1.4.0, GREE Tanken Dorirando application before 1.0.7, GREE Tsurisuta application before 1.5.0, GREE Monpura application before 1.1.1, GREE Kaizokuoukoku Columbus application before 1.3.5, GREE haconiwa application before 1.1.0, GREE Seisen Cerberus application before...
GHSA-XM5F-HC9R-76F3 PHP JOSE Library by Gree Inc. Uses a Broken or Risky Cryptographic Algorithm
The PHP JOSE Library by Gree Inc. prior to 2.2.1 is vulnerable to key confusion/algorithm substitution in the JWS component resulting in bypassing the signature verification via crafted tokens...
PHP JOSE Library by Gree Inc. Uses a Broken or Risky Cryptographic Algorithm
The PHP JOSE Library by Gree Inc. prior to 2.2.1 is vulnerable to key confusion/algorithm substitution in the JWS component resulting in bypassing the signature verification via crafted tokens...
GREE+ application for Android cross-site request forgery vulnerability
GREE+ application for Android is an Android-based application for controlling and managing GREE air-conditioning devices from Gree Electric Appliances GREE, China. A cross-site request forgery vulnerability exists in version 1.4.0.8 of the GREE+ application for Android. The vulnerability stems fr...
CVE-2018-20582
The GREE+ aka com.gree.greeplus application 1.4.0.8 for Android suffers from Cross Site Request Forgery...
CVE-2018-20582
The GREE+ aka com.gree.greeplus application 1.4.0.8 for Android suffers from Cross Site Request Forgery...
Cross site request forgery (csrf)
The GREE+ aka com.gree.greeplus application 1.4.0.8 for Android suffers from Cross Site Request Forgery...
CVE-2018-20582
The GREE+ aka com.gree.greeplus application 1.4.0.8 for Android suffers from Cross Site Request Forgery...
CVE-2018-20582
CVE-2018-20582 affects the GREE+ (com.gree.greeplus) Android app, version 1.4.0.8, and is described as a Cross Site Request Forgery vulnerability. The root cause, as stated in CNVD and RH Red Hat records, is that the WEB application does not adequately verify that a request originates from a trus...
CVE-2016-5431
The PHP JOSE Library by Gree Inc. before version 2.2.1 is vulnerable to key confusion/algorithm substitution in the JWS component resulting in bypassing the signature verification via crafted tokens...
gree-bulgaria.com XSS vulnerability
Vulnerable URL: http://gree-bulgaria.com/wp-content/plugins/category-grid-view-gallery/includes/CatGridPost.php?ID=3544%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
CVE-2013-0704
Directory traversal vulnerability in the GREE application before 1.3.3 for Android allows remote attackers to obtain sensitive information via a crafted URL, which is not properly handled during interaction with other applications...
Directory traversal
Directory traversal vulnerability in the GREE application before 1.3.3 for Android allows remote attackers to obtain sensitive information via a crafted URL, which is not properly handled during interaction with other applications...
CVE-2013-0704
Directory traversal vulnerability in the GREE application before 1.3.3 for Android allows remote attackers to obtain sensitive information via a crafted URL, which is not properly handled during interaction with other applications...
CVE-2013-0704
CVE-2013-0704 affects GREE for Android prior to version 1.3.3. The vulnerability is a directory traversal flaw caused by improper handling of URL inputs, potentially allowing a remote attacker using another Android app to disclose sensitive information stored by the app. Documented sources (JVN/J...