8 matches found
ASUS WebStorage Android Security Bypass Vulnerability
ASUS WebStorage is an online storage service from ASUS China.A security vulnerability exists in ASUS WebStorage Android, which could be exploited by attackers to log into a regular user account to access, modify, or delete user account information...
CVE-2022-26672
ASUS WebStorage has a hardcoded API Token in the APP source code. An unauthenticated remote attacker can use this token to establish connections with the server and carry out login attempts to general user accounts. A successful login to a general user account allows the attacker to access, modif...
CVE-2022-26672
ASUS WebStorage has a hardcoded API Token in the APP source code. An unauthenticated remote attacker can use this token to establish connections with the server and carry out login attempts to general user accounts. A successful login to a general user account allows the attacker to access, modif...
Hardcoded credentials
ASUS WebStorage has a hardcoded API Token in the APP source code. An unauthenticated remote attacker can use this token to establish connections with the server and carry out login attempts to general user accounts. A successful login to a general user account allows the attacker to access, modif...
CVE-2022-26672
The CVE-2022-26672 entry concerns ASUS WebStorage where a hardcoded API token in the APP source enables an unauthenticated remote attacker to connect to the server and perform login attempts to general user accounts. A successful login allows access to, modification of, or deletion of user accoun...
CVE-2022-26672 ASUS WebStorage - Use of Hard-coded Credentials
ASUS WebStorage has a hardcoded API Token in the APP source code. An unauthenticated remote attacker can use this token to establish connections with the server and carry out login attempts to general user accounts. A successful login to a general user account allows the attacker to access, modif...
ASUS WebStorage 信任管理问题漏洞
ASUS WebStorage is an online storage service from ASUS China.A security vulnerability exists in ASUS WebStorage Android, which could be exploited by attackers to log into a regular user account to access, modify, or delete user account information...
Information Disclosure
ng2-webstorage is vulnerable to information disclosure. This is because the key in local storage is not cleared properly after deletion. The stored sensitive information should be deleted after the deletion of a key remains until the page is refreshed...