Fabian Densborn

تنشأ المشكلة عندما يستخدم حقل «من» في رسالة بريد إلكتروني صيغة غير صحيحة لاسم المجموعة. ويؤدي ذلك إلى عرض Thunderbird لعنوان مرسل غير صحيح.

An issue was discovered in the Boomerang Parental Control application where the app is missing the android:allowBackup="false" attribute in the manifest. This allows a user to backup the internal memory of the app to a PC, giving them access to the API token used to authenticate requests to the API. This vulnerability can be exploited by an attacker with physical access to the device, potentially allowing them to take over the admin control panel and spy on a kid. The estimated number of potentially affected devices is over 100,000.

An issue was discovered in the Boomerang Parental Control application, allowing a child to use Safe Mode to remove all restrictions temporarily or uninstall the application without the parents noticing.

An issue in the Kiddoware Kids Place Parental Control application allows a child to temporarily remove all restrictions without the parents noticing. This can be achieved by rebooting into Android Safe Mode and disabling the "Display over other apps" permission.

An issue was discovered where password reset links sent by email contain a token that remains valid even after the password reset, allowing it to be used again to change the password of the corresponding user. This token expires 3 hours after issuance and is sent as a query parameter when resetting. An attacker with access to the browser history can use the token again to change the password and take over the account.

A security issue was discovered where users can upload temporary files with certain file endings, such as .html or .htm, that contain a malicious payload. This payload can be used to send a link to an administrator user, potentially leading to exploitation.

An issue was discovered where the server response to a password reset request leaks the existence of users. If a password reset is attempted for a non-existent user, the error message indicates that the user does not exist.