Bugrahan Karahan

**Name of the Vulnerable Software and Affected Versions** Viidure Dashcam Android Application (affected versions not specified) **Description** The central cloud storage backend for the dashcam platform is misconfigured with public-read permissions. This allows unrestricted access to all stored objects in the shared storage bucket, exposing sensitive user records, live dashcam footage, application packages, and firmware files to anyone on the internet. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Viidure Android application (affected versions not specified) **Description** The application embeds permanent, plaintext cloud storage credentials within its compiled code. This allows unauthorized full access to critical platform storage, enabling the reading, modification, or deletion of operational files, including firmware and application binaries. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.