Dirty_Stream-Android-POC

免责声明 本项目仅供教育目的使用。作者不支持或认可任何非法或恶意活动。使用此漏洞完全由您自行承担风险。作者不对因使用此代码而产生的任何损害或法律后果承担责任。 DirtyStream-Android-POC 这是针对 MI-File Explorer V1-210567 版本的利用程序。它会将 pwned.txt 写入 "/data/user/0/com.mi.android.globalFileexplorer/sharedprefs" 目录下。...

Send Anywhere application for Android trust management issue vulnerability

Send Anywhere application for Android is a file transfer application based on Android platform. A trust management issue vulnerability exists in version 9.4.18 of the Send Anywhere application for the Android platform, which stems from a failure of the program to securely store information, which...

CVE-2019-13100

The Send Anywhere application 9.4.18 for Android stores confidential information insecurely on the system i.e., in cleartext, which allows a non-root user to find out the username/password of a valid user via /data/data/com.estmob.android.sendanywhere/sharedprefs/sendanywheredevice.xml...

CVE-2019-13096: Cleartext Storage of Sensitive Information

TronLink Wallet 2.2.0 stores user wallet keystore in plaintext and places them in insecure storage. An attacker can read and reuse the user keystore of a valid user via /data/data/com.tronlink.wallet/sharedprefs/ .xml to gain unauthorized access...

CVE-2019-13100: Cleartext Storage of Sensitive Information

The Send Anywhere application 9.4.18 for Android stores confidential information insecurely on the system i.e., in cleartext, which allows a non-root user to find out the username/password of a valid user via /data/data/com.estmob.android.sendanywhere/sharedprefs/sendanywheredevice.xml...

CVE-2019-11383: Undefined Security Weakness

An issue was discovered in the Medha WiFi FTP Server application 1.8.3 for Android. An attacker can read the username/password of a valid user via /data/data/com.medhaapps.wififtpserver/sharedprefs/com.medhaapps.wififtpserverpreferences.xml...

CVE-2018-11544: Insufficiently Protected Credentials

The Olive Tree Ftp Server application 1.32 for Android has Insecure Data Storage because a username and password are stored in the /data/data/com.theolivetree.ftpserver/sharedprefs/com.theolivetree.ftpserverpreferences.xml file as the prefUsername and prefUserpass strings...