EUVD-2018-4594

Malware in sbrugna...

CVE-2018-12638

An issue was discovered in the Bose Soundtouch app 18.1.4 for iOS. There is no frontend input validation of the device name. A malicious device name can execute JavaScript on the registered Bose User Account if a speaker has been connected to the app...

CVE-2018-12638

An issue was discovered in the Bose Soundtouch app 18.1.4 for iOS. There is no frontend input validation of the device name. A malicious device name can execute JavaScript on the registered Bose User Account if a speaker has been connected to the app...

PT-2019-8913

Name of the Vulnerable Software and Affected Versions Bose Soundtouch app version 18.1.4 Description An issue in the Bose Soundtouch app allows for the execution of JavaScript on a registered Bose User Account if a speaker has been connected to the app. This is possible due to the lack of fronten...

Soundtouch App Cross-Site Scripting Vulnerability

Soundtouch App is a mobile setup software for music speakers. A cross-site scripting vulnerability exists in Soundtouch App. An attacker can exploit the vulnerability to execute malicious javascript code in the user context...