1061 matches found
CVE-2017-5905
The Dollar Bank Mobile app 2.6.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2017-5905
The CVE-2017-5905 entry concerns the Dollar Bank Mobile app for iOS (version 2.6.3). The vulnerability is that the app does not verify X.509 certificates from SSL servers, which enables a man-in-the-middle attacker to spoof the legitimate server and obtain sensitive information via a crafted cert...
CVE-2017-5907
The Great Southern Bank Great Southern Mobile Banking app before 4.0.4 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2017-3212
CVE-2017-3212 affects the Space Coast Credit Union SCCU Mobile apps: iOS v2.2 and Android v2.1.0.1104, which fail to verify SSL X.509 certificates. This enables MITM attackers to spoof servers and access sensitive information via crafted certificates. Connected sources (NVD, CNVD, CVE listings, C...
PT-2017-16746
Name of the Vulnerable Software and Affected Versions Dollar Bank Mobile app version 2.6.3 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the app does not verify X.509 certificates from SSL servers...
PT-2017-15706
Name of the Vulnerable Software and Affected Versions Space Coast Credit Union Mobile app version 2.2 for iOS Space Coast Credit Union Mobile app version 2.1.0.1104 for Android Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...
CVE-2017-3212: Improper Certificate Validation
The Space Coast Credit Union Mobile app 2.2 for iOS and 2.1.0.1104 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2017-5905: Improper Certificate Validation
The Dollar Bank Mobile app 2.6.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Huawei Files User Cabinet Password Brute Force Vulnerability
Huawei Files is a file management APP software on cell phones from Huawei China. Huawei Files is vulnerable to brute-force cracking of the user's confidential cabinet password. Due to improper design of the confidential cabinet key database, an illegal attacker can access the sensitive informatio...
CVE-2016-1221
Jetstar App for iOS before 3.0.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2016-1186
Kintone mobile for Android 1.0.0 through 1.0.5 does not verify SSL server certificates...
Boost My Followers - Native code usage, SD-card access, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application Boost My Followers published at the 'play' market has multiple vulnerabilities...
Instagram Adds Two-Factor Authentication
Instagram became the latest in a long line of services over the years to offer users two-factor authentication this week. Kevin Systrom, co-founder and CEO of the Facebook-owned mobile photo-sharing app announced the feature on its blog Thursday afternoon. With the feature – accessible via Settin...
WordPress Mobile app Builder 1.05 - Unauthenticated File Upload
Plugin is still affected and has been closed...
mobile-friendly-app-builder-by-easytouch 3.0 - Unauthenticated File Upload
Plugin is still affected and has been closed...
Wordpress Plugin Mobile App Native Remote File Upload Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A remote file upload vulnerability exists in the Wordpress plugin Mobile App Native. Because the application fails to...
Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0
./ zen-mobile-app-native/server/images.php code for missing authentication Mobile App WordPress plugin lets you turn your website into a full-featured mobile application in minutes using Mobile App Builder. Vulnerability: The code in the file ./ zen-mobile-app-native/server/images.php doesn't...
Design/Logic Flaw
Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0...
