188 matches found
PT-2023-14015 · Intel · Intel Retail Edge Mobile Ios
Name of the Vulnerable Software and Affected Versions: IntelR Retail Edge Mobile iOS application versions prior to 3.4.7 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable escalation of privilege via local access...
Intel® Retail Edge Mobile App Advisory
Summary: Potential security vulnerabilities in the Intel® Retail Edge Mobile application may allow escalation of privilege, denial of service or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-41690...
DEBIAN-CVE-2023-28999
Nextcloud is an open-source productivity platform. In Nextcloud Desktop client 3.0.0 until 3.8.0, Nextcloud Android app 3.13.0 until 3.25.0, and Nextcloud iOS app 3.0.5 until 4.8.0, a malicious server administrator can gain full access to an end-to-end encrypted folder. They can decrypt files,...
CVE-2023-22702 WordPress WPMobile.App — Android and iOS Mobile Application Plugin <= 11.13 is vulnerable to Cross Site Scripting (XSS)
Auth. contributor+ Cross-Site Scripting XSS vulnerability in WPMobile.App WPMobile.App — Android and iOS Mobile Application plugin = 11.13 versions...
CVE-2022-45637
An insecure password reset issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 service via insecure expiry mechanism...
Massive Ad Fraud Scheme Shut Down: 11 Million Phones Targeted
By Waqas The ad fraud was discovered while the researchers were investigating an iOS application that had been heavily impacted by an app spoofing attack. This is a post from HackRead.com Read the original post: Massive Ad Fraud Scheme Shut Down: 11 Million Phones Targeted...
Design/Logic Flaw
Insufficiently protected credentials in the IntelR Datacenter Group Event iOS application, all versions, may allow an unauthenticated user to potentially enable information disclosure via network access...
CVE-2022-30296
Insufficiently protected credentials in the IntelR Datacenter Group Event iOS application, all versions, may allow an unauthenticated user to potentially enable information disclosure via network access...
Intel® Datacenter Group Event App Advisory
Summary: A potential security vulnerability in Intel® Datacenter Group Event iOS application may allow information disclosure. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for the Intel® Datacenter Group Event iOS...
CVE-2022-23625 DoS vulnerability: Malformed Resource Identifiers
Wire-ios is a messaging application using the wire protocol on apple's ios platform. In versions prior to 3.95 malformed resource identifiers may render the iOS Wire Client completely unusable by causing it to repeatedly crash on launch. These malformed resource identifiers can be generated and...
Banco Guayaquil 8.0.0 Cross Site Scripting Vulnerability
Banco Guayaquil for iOS version 8.0.0 suffers from a script insertion vulnerability where a user can insert malicious code into their own name and could possibly be leveraged for attacks upstream. Document Title: =============== Banco Guayaquil Versión 8.0.0 IOS - Cross Site Scripting Stored...
CVE-2021-3179
GGLocker iOS application, contains an insecure data storage of the password hash value which results in an authentication bypass...
CVE-2021-3179
CVE-2021-3179 concerns the GGLocker iOS app, where an insecure data storage of the password hash enables an authentication bypass. The entry is corroborated by multiple sources in connected documents (NVD, Red Hat, CVE lists). Affected software: GGLocker iOS application. Underlying issue: insecur...
Notex the best notes 6.4 - Denial of Service (PoC)
Exploit Title: Notex the best notes 6.4 - Denial of Service PoC Date: 06-14-2021 Author: Geovanni Ruiz Download Link: https://apps.apple.com/us/app/notex-the-best-notes/id847994217 Version: 6.4 Category: DoS iOS Vulnerability Notex – the best notes is vulnerable to a DoS condition when a long lis...
Telegram Stack Overflow Vulnerability (CNVD-2021-38308)
Telegram is an instant messaging mobile application. A stack overflow vulnerability exists in the custom derived graysplitcubic function of the Rlottie library for Telegram Android version prior to 7.1.0 2090, iOS version prior to 7.1, and macOS version prior to 7.1. An attacker can exploit this...
Telegram Denial of Service Vulnerability
Telegram is an instant messaging mobile application. A denial of service vulnerability exists in the MtProtoKitFramework of the Telegram app for iOS version 7.6.2. An authenticated, remote attacker can exploit the vulnerability to cause a denial of service...
CIRA Canadian Shield iOS Application - Man-In-The-Middle SSL Certificate Vulnerability
CIRA Canadian Shield iOS Application - MITM SSL Certificate Vulnerability CVE-2021-27189 -- https://www.info-sec.ca/advisories/CIRA-Canadian-Shield.html Overview "CIRA Canadian Shield protects you from online threats such as malicious domains, phishing websites and helps to keep your personal dat...
Shopify: Low Privileged user can add or remove cash to/from sales register
Low privileged user having no access to Shopify POS and very low permission set is not allowed to add cash to the sales register or remove cash from the sales register. But missing server-side permission checks on the vulnerable request allows a low privileged user to do this. A low privileged ca...
Security Bulletin: MaaS360 has identified a vulnerability in the MaaS360 iOS Application. (CVE-2019-4735)
Summary A vulnerability was identified and remediated in the IBM MaaS360 for iOS Application Version 3.96.62. Vulnerability Details CVEID: CVE-2019-4735 DESCRIPTION: IBM MaaS360 for iOS could allow an attacker with physical access to the device to obtain sensitive information from the agent outsi...