mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-29 01:31:01 +00:00
19 lines
657 B
Markdown
19 lines
657 B
Markdown
### [CVE-2019-17356](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17356)
|
|

|
|

|
|

|
|
|
|
### Description
|
|
|
|
The Infinite Design application 3.4.12 for Android sends a username and password via TCP without any encryption during login, as demonstrated by sniffing of a public Wi-Fi network.
|
|
|
|
### POC
|
|
|
|
#### Reference
|
|
- https://bit.ly/2kfL7xE
|
|
- https://pastebin.com/yUFxs2J7
|
|
|
|
#### Github
|
|
No PoCs found on GitHub currently.
|
|
|