GO SMS Pro Android App Exposes Private Photos, Videos and Messages

A security weakness discovered in the GO SMS Pro Android app can be exploited to publicly expose media sent using the app, according to researchers. The GO SMS Pro application is a popular messenger app with more than 100 million downloads from the Google Play store. Researchers at Trustwave...

Lone Wolf loadingDOCS Insecure Permissions

EZMAX SECURITY ADVISORY https://www.ezmax.ca/ Product: Loading Docs Vendor: Lone Wolf Technologies http://www.lwolf.com CVE ID: CVE-2018-15502 NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2018-15502 Subject: Insecure permissions allow remote attackers to download any confidential files via http...

CVE-2018-15502

Insecure permissions in Lone Wolf Technologies loadingDOCS 2018-08-13 allow remote attackers to download any confidential files via https requests for predictable URLs...

Code injection

Insecure permissions in Lone Wolf Technologies loadingDOCS 2018-08-13 allow remote attackers to download any confidential files via https requests for predictable URLs...

CVE-2018-15502

Insecure permissions in Lone Wolf Technologies loadingDOCS 2018-08-13 allow remote attackers to download any confidential files via https requests for predictable URLs...

CVE-2018-15502

The CVE-2018-15502 entry concerns Lone Wolf Technologies loadingDOCS. An insecure permissions flaw in the 2018-08-13 version allows remote attackers to download confidential files by issuing HTTPS requests to predictable URLs. The root cause is inadequate access controls on resources, enabling un...

CVE-2018-15502: Incorrect Permission Assignment for Critical Resource

Insecure permissions in Lone Wolf Technologies loadingDOCS 2018-08-13 allow remote attackers to download any confidential files via https requests for predictable URLs...

PT-2018-13060

Name of the Vulnerable Software and Affected Versions Lone Wolf Technologies loadingDOCS version 2018-08-13 Description The issue allows remote attackers to download confidential files via https requests for predictable URLs due to insecure permissions. Recommendations For version 2018-08-13,...

QNAP Systems Signage Station Script Execution Vulnerability

QNAP Systems Signage Station is a suite of ad creation applications for QNAP NAS. A security vulnerability in QNAP Systems Signage Station allows a remote attacker to upload malicious files using predictable URLs and execute scripts in the files with administrator privileges...

CVE-2006-4659

The Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses predictable URLs for the spam classification of each message, which allows remote attackers to cause Panda to classify arbitrary messages as spam via a web page that contains IMG tags with the predictable URLs. NOTE: this...

CVE-2006-4659

The CVE-2006-4659 entry concerns Panda Platinum Internet Security 2006 (10.02.01) and 2007 (11.00.00), where predictable URLs used for per-message spam classification can be triggered by a malicious web page containing IMG tags to have Panda classify arbitrary messages as spam. This is a potentia...

CVE-2006-4659: Undefined Security Weakness

The Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses predictable URLs for the spam classification of each message, which allows remote attackers to cause Panda to classify arbitrary messages as spam via a web page that contains IMG tags with the predictable URLs. NOTE: this...

CVE-2002-1538: Undefined Security Weakness

Acuma Acusend 4, and possibly earlier versions, allows remote authenticated users to read the reports of other users by inferring the full URL, whose name is easily predictable...