EUVD-2018-4594

Malware in sbrugna...

CVE-2018-12638

An issue was discovered in the Bose Soundtouch app 18.1.4 for iOS. There is no frontend input validation of the device name. A malicious device name can execute JavaScript on the registered Bose User Account if a speaker has been connected to the app...

CVE-2018-12638

An issue was discovered in the Bose Soundtouch app 18.1.4 for iOS. There is no frontend input validation of the device name. A malicious device name can execute JavaScript on the registered Bose User Account if a speaker has been connected to the app...

Soundtouch App Cross-Site Scripting Vulnerability

Soundtouch App is a mobile setup software for music speakers. A cross-site scripting vulnerability exists in Soundtouch App. An attacker can exploit the vulnerability to execute malicious javascript code in the user context...