CVE-2019-12370

The Spark application through 2.0.2 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READEXTERNALSTORAGE permission...

EUVD-2019-4005

Malware in sbrugna...

EUVD-2015-6245

Malware in sbrugna...

EUVD-2019-0111

Malware in sbrugna...

Cross site scripting

The Spark application through 2.0.2 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READEXTERNALSTORAGE permission...

PYSEC-2019-169

When using PySpark , it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application. This affects versions 1.x, 2.0.x, 2.1.x, 2.2.0 to 2.2.2, and 2.3.0 to 2.3.1...

Privilege Escalation

PySpark is vulnerable to privilege escalation. A local user is able to connect to the spark application and impersonate the user running the Spark application...

CVE-2015-6303: Exposure of Sensitive Information to an Unauthorized Actor

The Cisco Spark application 2015-07-04 for mobile operating systems does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, aka Bug IDs CSCut36742 and CSCut36844...

PT-2015-7167

Name of the Vulnerable Software and Affected Versions Cisco Spark application version 2015-07-04 Description The issue is related to the improper verification of X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a craft...