Vulnerabilidades de Rubikon Teknoloji

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Rubikon Teknoloji: 2 registro(s), com severidade, exploração e correções.

Easy Transfer 2

Somente exploradas (KEV) →

CVE-2020-37087 Média · 5.1 CWE-79 03/02/2026

Easy Transfer 1.7 for iOS - Persistent Cross-Site Scripting

Easy Transfer Wifi Transfer v1.7 for iOS contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts by manipulating the oldPath, newPath, and path parameters in Create Folder and Move/Edit functions. Attackers can exploit improper input validation via POST requests to execute arbitrary JavaScript in the context of the mobile web application.

CVE-2020-37086 Média · 6.2 CWE-22 03/02/2026

Easy Transfer 1.7 for iOS - Directory Traversal

Easy Transfer 1.7 iOS mobile application contains a directory traversal vulnerability that allows remote attackers to access unauthorized file system paths without authentication. Attackers can exploit the vulnerability by manipulating path parameters in GET and POST requests to list or download sensitive system files and inject malicious scripts into application parameters.