Filtered by vendor Heinekingmedia Subscriptions
Filtered by product Stashcat Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-13129 1 Heinekingmedia 1 Stashcat 2021-08-12 7.2 High
An issue was discovered in the stashcat app through 3.9.1 for macOS, Windows, Android, iOS, and possibly other platforms. The GET method is used with client_key and device_id data in the query string, which allows attackers to obtain sensitive information by reading web-server logs.
CVE-2020-13637 1 Heinekingmedia 1 Stashcat 2021-07-20 7.5 High
An issue was discovered in the stashcat app through 3.9.2 for macOS, Windows, Android, iOS, and possibly other platforms. It stores the client_key, the device_id, and the public key for end-to-end encryption in cleartext, enabling an attacker (by copying or having access to the local storage database file) to login to the system from any other computer, and get unlimited access to all data in the users's context.
CVE-2017-11132 1 Heinekingmedia 1 Stashcat 2019-10-03 7.5 High
An issue was discovered in heinekingmedia StashCat before 1.5.18 for Android. No certificate pinning is implemented; therefore the attacker could issue a certificate for the backend and the application would not notice it.