PT-2020-16702

Name of the Vulnerable Software and Affected Versions BASETech GE-131 BT-1837836 firmware version 20180921 Description The issue concerns a Cleartext Transmission of Sensitive Information, which could potentially leak sensitive information transmitted between the mobile app and the camera device...

Basetech Ge-131 Bt-1837836 Security Vulnerability

Basetech Ge-131 Bt-1837836 is a webcam from Basetech. A security vulnerability exists in BASETech GE-131 BT-1837836 firmware 20180921, which stems from the presence of a plaintext transmission of sensitive information vulnerability that could disclose sensitive information transmitted between a...

CVE-2020-27554: Cleartext Transmission of Sensitive Information

Cleartext Transmission of Sensitive Information vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 exists which could leak sensitive information transmitted between the mobile app and the camera device...

CVE-2020-5667

Studyplus App for Android v6.3.7 and earlier and Studyplus App for iOS v8.29.0 and earlier use a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app...

Is Black Friday a Thing of the Past? Not for Mobile

I recently ordered a new Weber grill from The Home Depot. When it was delivered, I discovered it was the floor model, and it wasn't the perfect grill I had anticipated. I called the local store, and -- long story short -- my friends at The Home Depot gave me a significant discount for not letting...

Real Life Comics App Has Denial of Service Vulnerability

Real Comics is a mobile comic app. A denial of service vulnerability exists in the Real Life Comics App, which can be exploited by attackers to have an impact on the usability of the application...

Smart male chastity lock cock-up

TL;DR Smart Bluetooth male chastity lock, designed for user to give remote control to a trusted 3rd party using mobile app/API Multiple API flaws meant anyone could remotely lock all devices and prevent users from releasing themselves Removal then requires an angle grinder or similar, used in clo...

CVE-2020-5623

NITORI App for Android versions 6.0.4 and earlier and NITORI App for iOS versions 6.0.2 and earlier allow remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack...

CVE-2020-6653

Eaton's Secure connect mobile app v1.7.3 & prior stores the user login credentials in logcat file when user create or register the account on the Mobile app. A malicious app or unauthorized user can harvest the information and later on can use the information to monitor and control the user's...

Information disclosure

Eaton's Secure connect mobile app v1.7.3 & prior stores the user login credentials in logcat file when user create or register the account on the Mobile app. A malicious app or unauthorized user can harvest the information and later on can use the information to monitor and control the user's...

CVE-2020-6653

The CVE-2020-6653 issue affects Eaton’s Secure Connect mobile app (v1.7.3 and earlier). The underlying flaw is that the app stores user login credentials in logcat files during account creation/registration, enabling a malicious app or unauthorized user to harvest those credentials and potentiall...

CVE-2020-6653: Exposure of Sensitive Information to an Unauthorized Actor

Eaton's Secure connect mobile app v1.7.3 & prior stores the user login credentials in logcat file when user create or register the account on the Mobile app. A malicious app or unauthorized user can harvest the information and later on can use the information to monitor and control the user's...

PT-2020-19207

Name of the Vulnerable Software and Affected Versions Eaton's Secure connect mobile app versions 1.7.3 and prior Description The issue allows unauthorized access to user login credentials. When a user creates or registers an account on the mobile app, the credentials are stored in the logcat file...

The vulnerability of the Mobile App application component for automating project management processes in Oracle Primavera Unifier allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Mobile App application for automating project management processes in Oracle Primavera Unifier is related to lack of access control. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information using t...

CVE-2020-14617

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Platform, Mobile App. Supported versions that are affected are 16.1, 16.2, 17.7-17.12, 18.8 and 19.12; Mobile App: Prior to 20.6. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2020-14618

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Mobile App. The supported version that is affected is Prior to 20.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Primavera Unifier...

Design/Logic Flaw

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Mobile App. The supported version that is affected is Prior to 20.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Primavera Unifier...

CVE-2020-14617

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Platform, Mobile App. Supported versions that are affected are 16.1, 16.2, 17.7-17.12, 18.8 and 19.12; Mobile App: Prior to 20.6. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2020-14618: Undefined Security Weakness

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Mobile App. The supported version that is affected is Prior to 20.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Primavera Unifier...

CVE-2020-14617: Undefined Security Weakness

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Platform, Mobile App. Supported versions that are affected are 16.1, 16.2, 17.7-17.12, 18.8 and 19.12; Mobile App: Prior to 20.6. Easily exploitable vulnerability allows low privileged attacker with...