Smule: Possible Subdomain Takeover For Inbound Emails

The affected URL email.smule.com pointed to sendgrid.net via a DNS CNAME record. As a result, a subdomain takeover was possible by registering the subdomain email.smule.com on Sendgrid...

Smule: [com.smule.autorap.*] Cloud Messaging/Push Notification service takeover due to clear-text usage of Legacy FCM Server keys in the client app

Potential FCM issues across several apps investigated and remediated. Reference to Research: https://twitter.com/absshax/status/1295383047295008768?s=19...

Smule: Open redirect bypass & SSRF Security Vulnerability

Open redirect issue. Full disclosure/writeup: https://medium.com/@snwlvl...

Smule: Missing Rate Limit in Forgot Password can Lead to email address leakage of all smule accounts

Hello Smule, I have found a vulnerability by which an attacker can get access of all the gmail accounts associated with Smule. The forgot password parameter can be brute forced through which an attacker can get the email address. Steps to Reproduce Enter your email address and for the forgot...

Smule: Missing Rate Limit in Password Change

Incorrect or missing rate limits related to account features...

Smule: Open Redirect on smule.com

NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to triage and respond quickly, so be sure to take your time filling out the report! Summary: Open Redirect at smule.com You...

Magic Piano by Smule - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Magic Piano by Smule published at the 'play' market has multiple vulnerabilities...

Sing! Karaoke by Smule - Dangerous filesystem permissions, Exported ContentProvider, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Sing! Karaoke by Smule published at the 'play' market has multiple vulnerabilities...

Songify by Smule - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Songify by Smule published at the 'play' market has multiple vulnerabilities...

AutoRap by Smule - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application AutoRap by Smule published at the 'play' market has multiple vulnerabilities...