20587 matches found
CVE-2022-38770
The mobile application in Transtek Mojodat FAM Fixed Asset Management 2.4.6 allows remote attackers to fetch other users' data upon a successful login request...
CVE-2022-38769
The mobile application in Transtek Mojodat FAM Fixed Asset Management 2.4.6 allows remote attackers to fetch cleartext passwords upon a successful login request...
CVE-2022-38768
The mobile application in Transtek Mojodat FAM Fixed Asset Management 2.4.6 allows remote attackers to bypass authorization...
CVE-2022-38771
The mobile application in Transtek Mojodat FAM Fixed Asset Management 2.4.6 allows remote attackers to send SCRIPT tags as injected input to the API request...
Authorization
The mobile application in Transtek Mojodat FAM Fixed Asset Management 2.4.6 allows remote attackers to bypass authorization...
Cross site request forgery (csrf)
The mobile application in Transtek Mojodat FAM Fixed Asset Management 2.4.6 allows remote attackers to fetch cleartext passwords upon a successful login request...
Cross site request forgery (csrf)
The mobile application in Transtek Mojodat FAM Fixed Asset Management 2.4.6 allows remote attackers to send SCRIPT tags as injected input to the API request...
CVE-2022-38771
The CVE-2022-38771 entry concerns Transtek Mojodat FAM (Fixed Asset Management) v2.4.6 where remote attackers can inject SCRIPT tags via an API request. Documents indicate the issue arises from unsanitized input in the API endpoint, potentially impacting confidentiality, integrity, and availabili...
CVE-2022-38771
The mobile application in Transtek Mojodat FAM Fixed Asset Management 2.4.6 allows remote attackers to send SCRIPT tags as injected input to the API request...
CVE-2022-38770
The mobile application in Transtek Mojodat FAM Fixed Asset Management 2.4.6 allows remote attackers to fetch other users' data upon a successful login request...
CVE-2022-38769
The mobile application in Transtek Mojodat FAM Fixed Asset Management 2.4.6 allows remote attackers to fetch cleartext passwords upon a successful login request...
CVE-2022-38769
CVE-2022-38769 affects the Transtek Mojodat FAM (Fixed Asset Management) mobile app, version 2.4.6. The issue enables remote attackers to fetch cleartext passwords after a successful login request. Exploitation details in connected sources confirm affected software and the login-data exposure ris...
CVE-2022-38768
The mobile application in Transtek Mojodat FAM Fixed Asset Management 2.4.6 allows remote attackers to bypass authorization...
CVE-2022-38768
CVE-2022-38768 concerns the mobile app Transtek Mojodat FAM (Fixed Asset Management) 2.4.6, where the underlying issue allows remote attackers to bypass authorization. The available connected documents consistently describe this as an authorization bypass in the 2.4.6 mobile release. No concrete ...
PT-2022-24560 · Transtek · Transtek Mojodat Fam
Name of the Vulnerable Software and Affected Versions: Transtek Mojodat FAM Fixed Asset Management version 2.4.6 Description: The issue allows remote attackers to fetch cleartext passwords upon a successful login request. This is related to the mobile application in Transtek Mojodat FAM...
PT-2022-24559 · Transtek · Transtek Mojodat Fam
Name of the Vulnerable Software and Affected Versions: Transtek Mojodat FAM Fixed Asset Management version 2.4.6 Description: The issue allows remote attackers to bypass authorization in the mobile application. Recommendations: For version 2.4.6, consider restricting access to sensitive features...
A week in security (September 5 – 11)
Last week on Malwarebytes Labs: Phishers use verified status as bait for Instagram users Microsoft will disable Basic authentication for Exchange Online in less than a month Zero-day puts a dent in Chrome's mojo Update now! QNAP warns users DeadBolt is exploiting Photo Station vulnerability Don't...
Apple IOS 安全漏洞
Apple iOS is a set of operating systems developed for mobile devices by the American company Apple. A security vulnerability exists in Apple IOS prior to version 16, which stems from the fact that in the iPhone 8 series and later iPhones, someone with physical access to the iOS device may be able...
PT-2025-38435
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ath11k module’s Mobile Host Interface MHI functionality. Specifically, a memory leak can occur in the ath11k mhi register function. This happe...
