EUVD-2015-3063

Malware in sbrugna...

EUVD-2015-3064

Malware in sbrugna...

EUVD-2020-26788

Malware in sbrugna...

CVE-2020-5627

Yodobashi App for Android versions 1.8.7 and earlier allows remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack...

CVE-2020-5627

Yodobashi App for Android versions 1.8.7 and earlier allows remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack...

CVE-2020-5627

Yodobashi App for Android versions 1.8.7 and earlier allows remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack...

Code injection

Yodobashi App for Android versions 1.8.7 and earlier allows remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack...

CVE-2020-5627

Yodobashi App for Android versions 1.8.7 and earlier allows remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack...

CVE-2020-5627

Yodobashi App for Android versions 1.8.7 and earlier allows remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack...

CVE-2020-5627

CVE-2020-5627 affects Yodobashi App for Android (versions up to 1.8.7). The vulnerability is an improper access control (CWE-284) in the app’s handling of Intents, allowing a remote attacker to make a user access an arbitrary URL requested by an Intent, which can lead to phishing. This is support...

PT-2020-18596

Name of the Vulnerable Software and Affected Versions Yodobashi App for Android versions 1.8.7 and earlier Description The issue allows remote attackers to lead a user to access an arbitrary website via the vulnerable App, potentially resulting in the user becoming a victim of a phishing attack...

CVE-2020-5627: URL Redirection to Untrusted Site

Yodobashi App for Android versions 1.8.7 and earlier allows remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack...

Yodobashi App for Android fails to restrict access permissions

Overview Yodobashi App for Android provided by Yodobashi Camera Co.,Ltd. implements the function to access a requested URL using an Intent. This function contains an improper access control vulnerability CWE-284 that may allow the vulnerable App to receive an Intent from an arbitrary App and to...

JVN#32396594: Yodobashi App for Android fails to restrict access permissions

Yodobashi App for Android provided by Yodobashi Camera Co.,Ltd. implements the function to access a requested URL using an Intent. This function contains an improper access control vulnerability CWE-284 that may allow the vulnerable App to receive an Intent from an arbitrary App and to access an...

Information disclosure

The Yodobashi App for Android 1.2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2015-2981

The Yodobashi App for Android 1.2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2015-2981

The CVE-2015-2981 entry concerns the Yodobashi App for Android (versions 1.2.1.0 and earlier) failing to verify SSL server certificates (X.509), enabling potential man-in-the-middle attacks and exposure of sensitive data. The underlying issue is an absent certificate verification in the app’s SSL...

CVE-2015-2981

The Yodobashi App for Android 1.2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2015-2981: Improper Certificate Validation

The Yodobashi App for Android 1.2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2018-4369

Name of the Vulnerable Software and Affected Versions Yodobashi App for Android versions 1.2.1.0 and earlier Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the app does not verify X.509 certificates from SSL...