Information Disclosure

com.sonymobile.jenkins.plugins.mq, mq-notifier is vulnerable to Information Disclosure. The vulnerability is due to logging potentially sensitive build parameters as part of debug information in build logs by default, which could lead to the unintentional exposure of sensitive data...

link.xperialounge.sonymobile.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-497311 Description| Value ---|--- Affected Website:| link.xperialounge.sonymobile.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure Standard:| Coordinated...

blogs.sonymobile.com XSS vulnerability

Vulnerable URL: http://blogs.sonymobile.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 02.08.2016 Latest check for patch:| 02.08.2016 16:16 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

sonymobile.com XSS vulnerability

Vulnerable URL: http://www.sonymobile.com/gb/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 01.06.2016 Latest check for patch:| 01.06.2016 00:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...

Sony PC Companion 2.1 (Load()) Stack-based Unicode Buffer Overflow

No description provided by source. Sony PC Companion 2.1 Load Stack-based Unicode Buffer Overload SEH Vendor: Sony Mobile Communications AB Product web page: http://www.sonymobile.com Affected version: 2.10.115 Production 27.1, Build 830 2.10.108 Production 26.1, Build 818 Summary: PC Companion i...

Sony PC Companion 2.1 (CheckCompatibility()) Stack-based Unicode Buffer Overflow

No description provided by source. Sony PC Companion 2.1 CheckCompatibility Stack-based Unicode Buffer Overload Vendor: Sony Mobile Communications AB Product web page: http://www.sonymobile.com Affected version: 2.10.115 Production 27.1, Build 830 2.10.108 Production 26.1, Build 818 Summary: PC...

Sony PC Companion 2.1 (Admin_RemoveDirectory()) Stack-based Unicode Buffer Overflow

No description provided by source. Sony PC Companion 2.1 AdminRemoveDirectory Stack-based Unicode Buffer Overload SEH Vendor: Sony Mobile Communications AB Product web page: http://www.sonymobile.com Affected version: 2.10.115 Production 27.1, Build 830 2.10.108 Production 26.1, Build 818 Summary...

Sony PC Companion 2.1 CheckCompatibility() Unicode Buffer Overflow

Sony PC Companion 2.1 CheckCompatibility Stack-based Unicode Buffer Overload Vendor: Sony Mobile Communications AB Product web page: http://www.sonymobile.com Affected version: 2.10.115 Production 27.1, Build 830 2.10.108 Production 26.1, Build 818 Summary: PC Companion is a computer application...

Sony PC Companion 2.1 - DownloadURLToFile() Unicode Stack Buffer Overflow

Sony PC Companion 2.1 - DownloadURLToFile Unicode Stack Buffer Overflow Sony PC Companion 2.1 DownloadURLToFile Stack-based Unicode Buffer Overload SEH Vendor: Sony Mobile Communications AB Product web page: http://www.sonymobile.com Affected version: 2.10.115 Production 27.1, Build 830 2.10.108...

Sony PC Companion 2.1 (Admin_RemoveDirectory()) Stack-based BOF

The vulnerability is caused due to a boundary error in PimData.dll when handling the value assigned to the 'OrgHeartBeat' item in the CheckCompatibility function and can be exploited to cause a stack-based buffer overflow via an overly long string which may lead to execution of arbitrary code on...

Sony PC Companion 2.1 (CheckCompatibility()) Stack-based Unicode BOF

The vulnerability is caused due to a boundary error in PimData.dll when handling the value assigned to the 'OrgHeartBeat' item in the CheckCompatibility function and can be exploited to cause a stack-based buffer overflow via an overly long string which may lead to execution of arbitrary code on...

Sony PC Companion 2.1 - Admin_RemoveDirectory() Unicode Stack Buffer Overflow

Sony PC Companion 2.1 - AdminRemoveDirectory Unicode Stack Buffer Overflow Sony PC Companion 2.1 AdminRemoveDirectory Stack-based Unicode Buffer Overload SEH Vendor: Sony Mobile Communications AB Product web page: http://www.sonymobile.com Affected version: 2.10.115 Production 27.1, Build 830...

Sony PC Companion 2.1 - 'CheckCompatibility()' Unicode Stack Buffer Overflow

Sony PC Companion 2.1 CheckCompatibility Stack-based Unicode Buffer Overload Vendor: Sony Mobile Communications AB Product web page: http://www.sonymobile.com Affected version: 2.10.115 Production 27.1, Build 830 2.10.108 Production 26.1, Build 818 Summary: PC Companion is a computer application...

Sony PC Companion 2.1 - 'Admin_RemoveDirectory()' Unicode Stack Buffer Overflow

Sony PC Companion 2.1 AdminRemoveDirectory Stack-based Unicode Buffer Overload SEH Vendor: Sony Mobile Communications AB Product web page: http://www.sonymobile.com Affected version: 2.10.115 Production 27.1, Build 830 2.10.108 Production 26.1, Build 818 Summary: PC Companion is a computer...

Sony PC Companion 2.1 (Admin_RemoveDirectory()) Stack-based Unicode Buffer Overload

Summary PC Companion is a computer application that acts as a portal to Sony Xperia and operator features and applications, such as phone software updates, management of contacts and calendar, media management with Media Go, and a backup and restore feature for your phone content. Description The...

Sony PC Companion 2.1 (CheckCompatibility()) Stack-based Unicode Buffer Overload

Summary PC Companion is a computer application that acts as a portal to Sony Xperia and operator features and applications, such as phone software updates, management of contacts and calendar, media management with Media Go, and a backup and restore feature for your phone content. Description The...

Sony Mobile website hacked by NullCrew

Another Cyber attack on Sony this year, Hacking group called "NullCrew" hack into one of the biggest site of Sony mobile website www.sonymobile.com and leak complete database on Internet. Nullcrew releasing their hack dumps from their official twitter account @OfficialNull. The dump of database...