1322 matches found
CVE-2015-5661
The CVE-2015-5661 entry concerns AirDroid for Android (SAND STUDIO) and its mishandling of implicit intents. Affected software: AirDroid for Android, version 1.1.0 and earlier. Root cause: improper handling of implicit intents that enables an attacker to obtain sensitive information through a cra...
PT-2015-7021
Name of the Vulnerable Software and Affected Versions SAND STUDIO AirDroid versions 1.1.0 and earlier Description The issue arises from the application's mishandling of implicit intents, allowing attackers to craft an application that can obtain sensitive information. Recommendations For versions...
CVE-2015-5661: Exposure of Sensitive Information to an Unauthorized Actor
The SAND STUDIO AirDroid application 1.1.0 and earlier for Android mishandles implicit intents, which allows attackers to obtain sensitive information via a crafted application...
AirDroid for Android vulnerable in handling of implicit intents
Overview AirDroid for Android provided by SAND STUDIO contains a vulnerability in the handling of implicit intents. Gaku Mochizuki reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact Information in AirDroid may ...
JVN#37825153: AirDroid for Android vulnerable in handling of implicit intents
AirDroid for Android provided by SAND STUDIO contains a vulnerability in the handling of implicit intents. Impact Information in AirDroid may be leaked to a third party through a malicious Android application. Solution Update the Software Update to the latest version according to the information...
DEBIAN-CVE-2014-8147
The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode ICU before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause a denial of service...
International Components for Unicode Heap Buffer Overflow Vulnerability
International Components for Unicode is a mature and widely used set of libraries and tools for Unicode support, software internationalization and software globalization. A heap buffer overflow vulnerability exists in versions prior to ICU 55.1, which stems from an error in the...
tipask注入漏洞
简要描述： sql注入漏洞（2次注入） 详细说明： 官方最新源码测试 在control中answer.php中 追问模块---追问 / function onappend $this-load"message"; $qid = intval$this-get2 ? $this-get2 : intval$this-post'qid'; $aid = intval$this-get3 ? $this-get3 : intval$this-post'aid'; $question = $ENV'question'-get$qid; $answer = $ENV'answer'-get$aid...
Top 5 OAuth 2 Implementation Vulnerabilities
Heya, back to my favourite topics namely OAuth . I have previously discussed about common OAuth 2 Implementation Vulnerabilities but now it is time maybe to list those and order them based on their criticality. 5 The Postman Always Rings Twice I have introduced this 'attack' in last year post...
UBUNTU-CVE-2014-8147
The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode ICU before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause a denial of service...
CVE-2014-5320
The Bump application for Android does not properly handle implicit intents, which allows attackers to obtain sensitive owner-name information via a crafted application...
Information disclosure
The Bump application for Android does not properly handle implicit intents, which allows attackers to obtain sensitive owner-name information via a crafted application...
CVE-2014-5320
The CVE-2014-5320 entry concerns the Bump for Android app, where improper handling of implicit intents allows disclosure of sensitive owner-name information from another device. Affected component: Bump for Android; root cause is mishandling implicit intents. Impact documented in sources as infor...
CVE-2014-5320: Exposure of Sensitive Information to an Unauthorized Actor
The Bump application for Android does not properly handle implicit intents, which allows attackers to obtain sensitive owner-name information via a crafted application...
PT-2014-6404
Name of the Vulnerable Software and Affected Versions The Bump application for Android affected versions not specified Description The issue arises from the application's improper handling of implicit intents, allowing attackers to craft an application that can obtain sensitive owner-name...
Bump for Android vulnerable in handling of implicit intents
Overview Bump for Android is an application that allows users to share information and files. Bump for Android contains a vulnerability in the handling of implicit intents. Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the...
JVN#08994136: Bump for Android vulnerable in handling of implicit intents
Bump for Android is an application that allows users to share information and files. Bump for Android contains a vulnerability in the handling of implicit intents. Impact Information such as the owner's name that was obtained from another device may be disclosed. Solution Do not use Bump for...
OAuth authentication memory vulnerability caution a user identity hijacking-vulnerability warning-the black bar safety net
With OpenSSL, like OAuthOpen Authorizationas a widely used open-source third-party login authentication Protocol, this year also broke a security vulnerability. In the third session of the know the security Forum, from Sina Weibo of the blue di snowball shows Sina as early as year 3 months...
(0Day) (Pwn2Own\Pwn4Fun) Microsoft Internet Explorer localhost Protected Mode Bypass Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
