← Back

Fedirtsapana

fedirtsapana

3 CVEs • 3 products

Products (3)

Click to collapse
Toggle
Simple Http Server Plus
simple_http_server_plus
2 CVEs
Tv Bro
tv_bro
1 CVE
Simple Http Server
simple_http_server
1 CVE

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-46918
1Fedirtsapana
1Simple Http Server Plus
Nov 21, 2024
Dec 27, 2023
N/A· v4
4.6 MEDIUM· v3
N/A· v2
Phlox com.phlox.simpleserver.plus (aka Simple HTTP Server PLUS) 1.8.1-plus has an Android manifest file that contains an entry with the android:allowBackup attribute set to true. This could be leveraged by an attacker wi...Show more
Phlox com.phlox.simpleserver.plus (aka Simple HTTP Server PLUS) 1.8.1-plus has an Android manifest file that contains an entry with the android:allowBackup attribute set to true. This could be leveraged by an attacker with physical access to the device.Show less
CVE-2023-46919
1Fedirtsapana
2Simple Http Server
Simple Http Server Plus
Nov 21, 2024
Dec 27, 2023
N/A· v4
6.3 MEDIUM· v3
N/A· v2
Phlox com.phlox.simpleserver (aka Simple HTTP Server) 1.8 and com.phlox.simpleserver.plus (aka Simple HTTP Server PLUS) 1.8.1-plus have a hardcoded aKySWb2jjrr4dzkYXczKRt7K (AES) encryption key. An attacker with physical...Show more
Phlox com.phlox.simpleserver (aka Simple HTTP Server) 1.8 and com.phlox.simpleserver.plus (aka Simple HTTP Server PLUS) 1.8.1-plus have a hardcoded aKySWb2jjrr4dzkYXczKRt7K (AES) encryption key. An attacker with physical access to the application's source code or binary can extract this key & use it decrypt the TLS secret.Show less
CVE-2023-43955
1Fedirtsapana
1Tv Bro
Nov 21, 2024
Dec 27, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The com.phlox.tvwebbrowser TV Bro application through 2.0.0 for Android mishandles external intents through WebView. This allows attackers to execute arbitrary code, create arbitrary files. and perform arbitrary download...Show more
The com.phlox.tvwebbrowser TV Bro application through 2.0.0 for Android mishandles external intents through WebView. This allows attackers to execute arbitrary code, create arbitrary files. and perform arbitrary downloads via JavaScript that uses takeBlobDownloadData.Show less