In the VitaFit cloud service, any user who has logged in can request a special token that gives them temporary cloud storage credentials. With those credentials they can view, change, or…
Too many irrelevant or confusing CVEs? Use stackflag.com
#vitafit #CVE #infosec
In the VitaFit cloud service, any user who has logged in can request a special token that gives them temporary cloud storage credentials. With those credentials they can view, change, or…
Too many irrelevant or confusing CVEs? Use stackflag.com
#vitafit #CVE #infosec
The VitaFit cloud service allows anyone to create a valid session by sending a Google or Facebook account ID to a login endpoint, without proving they own that account. This lets a remote…
Too many irrelevant or confusing CVEs? Use stackflag.com
#vitafit #CVE #infosec
The VitaFit cloud service allows anyone to create a valid session by sending a Google or Facebook account ID to a login endpoint, without proving they own that account. This lets a remote…
Too many irrelevant or confusing CVEs? Use stackflag.com
#vitafit #CVE #infosec
VitaFit cloud API before 2026-10-30 contained an authentication bypass vulnerability that allows remote attack
Fix: https://patchthecve.com/cve/CVE-2026-54384.html
VitaFit cloud API before 2026-10-30 contained an authentication bypass vulnerability that allows remote attack
Fix: https://patchthecve.com/cve/CVE-2026-54384.html
VitaFit cloud API before 2026-10-30 contained an authentication bypass vulnerability that allows ...
https://www.thehackerwire.com/vulnerability/CVE-2026-54384/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
VitaFit cloud API before 2026-10-30 contained an authentication bypass vulnerability that allows ...
https://www.thehackerwire.com/vulnerability/CVE-2026-54384/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
VitaFit cloud API before 2026-10-30 contained an authentication bypass vulnerability that allows remote att...
🔎 https://stemshop.top/cve/CVE-2026-54384
#CVE #CyberSecurity #InfoSec
VitaFit cloud API before 2026-10-30 contained an authentication bypass vulnerability that allows remote att...
🔎 https://stemshop.top/cve/CVE-2026-54384
#CVE #CyberSecurity #InfoSec
VitaFit cloud API before 2026-10-30 contained a broken access control vulnerability that allows any authent...
🔎 https://stemshop.top/cve/CVE-2026-54378
#CVE #CyberSecurity #InfoSec
VitaFit cloud API before 2026-10-30 contained a broken access control vulnerability that allows any authent...
🔎 https://stemshop.top/cve/CVE-2026-54378
#CVE #CyberSecurity #InfoSec
VitaFit cloud API before 2026-10-30 contained a misconfigured cloud storage bucket vulnerability ...
https://www.thehackerwire.com/vulnerability/CVE-2026-54381/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
VitaFit cloud API before 2026-10-30 contained a misconfigured cloud storage bucket vulnerability ...
https://www.thehackerwire.com/vulnerability/CVE-2026-54381/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
📊 8.7/10
🏢 Shenzhen Shine Industrial Co., Ltd.
📝 VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure TLS/SSL certificate validation vulnerabilit...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117146
#cybersecurity #infosec #cve #euvd
📊 8.7/10
🏢 Shenzhen Shine Industrial Co., Ltd.
📝 VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure TLS/SSL certificate validation vulnerabilit...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117146
#cybersecurity #infosec #cve #euvd
📊 8.6/10
🏢 Shenzhen Shine Industrial Co., Ltd.
📝 VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure session management vulnerability that allow...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117149
#cybersecurity #infosec #cve #euvd
📊 8.6/10
🏢 Shenzhen Shine Industrial Co., Ltd.
📝 VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure session management vulnerability that allow...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117149
#cybersecurity #infosec #cve #euvd
📊 5.1/10
🏢 Shenzhen Shine Industrial Co., Ltd.
📝 VitaFit cloud API before 2026-10-30 contained a stored cross-site scripting vulnerability that allows authenticated attacker...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117157
#cybersecurity #infosec #cve #euvd
📊 5.1/10
🏢 Shenzhen Shine Industrial Co., Ltd.
📝 VitaFit cloud API before 2026-10-30 contained a stored cross-site scripting vulnerability that allows authenticated attacker...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117157
#cybersecurity #infosec #cve #euvd
📊 5.1/10
🏢 Shenzhen Shine Industrial Co., Ltd.
📝 VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a cleartext traffic vulnerability that allows network-b...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117147
#cybersecurity #infosec #cve #euvd
📊 5.1/10
🏢 Shenzhen Shine Industrial Co., Ltd.
📝 VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a cleartext traffic vulnerability that allows network-b...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117147
#cybersecurity #infosec #cve #euvd
VitaFit cloud API before 2026-10-30 contained an improper access control vulnerability in its Cog...
https://www.thehackerwire.com/vulnerability/CVE-2026-54382/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
VitaFit cloud API before 2026-10-30 contained an improper access control vulnerability in its Cog...
https://www.thehackerwire.com/vulnerability/CVE-2026-54382/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
📊 9.3/10
🏢 Shenzhen Shine Industrial Co., Ltd.
📝 VitaFit cloud API before 2026-10-30 contained a broken access control vulnerability that allows any authenticated user to ob...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117155
#cybersecurity #infosec #cve #euvd
📊 9.3/10
🏢 Shenzhen Shine Industrial Co., Ltd.
📝 VitaFit cloud API before 2026-10-30 contained a broken access control vulnerability that allows any authenticated user to ob...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117155
#cybersecurity #infosec #cve #euvd
📊 8.7/10
🏢 Shenzhen Shine Industrial Co., Ltd.
📝 VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a hardcoded credentials vulnerability that allows attac...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117148
#cybersecurity #infosec #cve #euvd
📊 8.7/10
🏢 Shenzhen Shine Industrial Co., Ltd.
📝 VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a hardcoded credentials vulnerability that allows attac...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117148
#cybersecurity #infosec #cve #euvd
📊 8.2/10
🏢 Shenzhen Shine Industrial Co., Ltd.
📝 VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure custom URI scheme vulnerability that allows...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117152
#cybersecurity #infosec #cve #euvd
📊 8.2/10
🏢 Shenzhen Shine Industrial Co., Ltd.
📝 VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure custom URI scheme vulnerability that allows...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117152
#cybersecurity #infosec #cve #euvd
📊 6.9/10
🏢 Shenzhen Shine Industrial Co., Ltd.
📝 VitaFit cloud API before 2026-10-30 contained an insecure direct object reference vulnerability that allows authenticated at...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117154
#cybersecurity #infosec #cve #euvd
📊 6.9/10
🏢 Shenzhen Shine Industrial Co., Ltd.
📝 VitaFit cloud API before 2026-10-30 contained an insecure direct object reference vulnerability that allows authenticated at...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117154
#cybersecurity #infosec #cve #euvd
📊 8.7/10
🏢 Shenzhen Shine Industrial Co., Ltd.
📝 VitaFit cloud API before 2026-10-30 contained a misconfigured cloud storage bucket vulnerability that allows unauthenticated...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117160
#cybersecurity #infosec #cve #euvd
📊 8.7/10
🏢 Shenzhen Shine Industrial Co., Ltd.
📝 VitaFit cloud API before 2026-10-30 contained a misconfigured cloud storage bucket vulnerability that allows unauthenticated...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117160
#cybersecurity #infosec #cve #euvd
📊 9.3/10
🏢 Shenzhen Shine Industrial Co., Ltd.
📝 VitaFit cloud API before 2026-10-30 contained an authentication bypass vulnerability that allows remote attackers to obtain ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117167
#cybersecurity #infosec #cve #euvd
📊 9.3/10
🏢 Shenzhen Shine Industrial Co., Ltd.
📝 VitaFit cloud API before 2026-10-30 contained an authentication bypass vulnerability that allows remote attackers to obtain ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117167
#cybersecurity #infosec #cve #euvd
📊 7.1/10
🏢 Shenzhen Shine Industrial Co., Ltd.
📝 VitaFit cloud API before 2026-10-30 contained an excessive data exposure vulnerability that allows any authenticated user to...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117165
#cybersecurity #infosec #cve #euvd
📊 7.1/10
🏢 Shenzhen Shine Industrial Co., Ltd.
📝 VitaFit cloud API before 2026-10-30 contained an excessive data exposure vulnerability that allows any authenticated user to...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117165
#cybersecurity #infosec #cve #euvd
📊 6.3/10
🏢 Shenzhen Shine Industrial Co., Ltd.
📝 VitaFit cloud API before 2026-10-30 contained an improper access control vulnerability in its Cognito-issued AWS role that a...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117163
#cybersecurity #infosec #cve #euvd
📊 6.3/10
🏢 Shenzhen Shine Industrial Co., Ltd.
📝 VitaFit cloud API before 2026-10-30 contained an improper access control vulnerability in its Cognito-issued AWS role that a...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117163
#cybersecurity #infosec #cve #euvd