Cybersecurity Advisories from VerSprite's Research Team Cybersecurity Advisories from VerSprite's Research Team

Research
Advisories

VerSprite's Research and Development division (a.k.a VS-Labs) is comprised of individuals who are passionate about diving into the internals of various technologies. Access our research advisories by clicking below:

Product

Date

Vulnerability

CVE ID

Product

POSIM EVO for Windows

Date

23 August 2018

Vulnerability

Use of Hard-Coded Database Credentials

CVE ID

CVE-2018-15808

Product

POSIM EVO for Windows

Date

23 August 2018

Vulnerability

Client Login "Override"

CVE ID

CVE-2018-15807

Product

AccuPOS

Date

23 August 2018

Vulnerability

Incorrect Permission Assignment for Critical Resource

CVE ID

CVE-2018-15809

Product

Airmail 3 for Mac

Date

21 August 2018

Vulnerability

EventHandler Race Condition

CVE ID

CVE-2018-15670

Product

Airmail 3 for Mac

Date

21 August 2018

Vulnerability

Incomplete Blacklist of Frame Owning Elements

CVE ID

CVE-2018-15669

Product

Airmail 3 for Mac

Date

21 August 2018

Vulnerability

Scheme Handler Information Disclosure

CVE ID

CVE-2018-15668

Product

Airmail 3 for Mac

Date

21 August 2018

Vulnerability

Scheme Handler Incorrect Access Control

CVE ID

CVE-2018-15667

Product

TunnelBear for Windows

Date

4 May 2018

Vulnerability

Privilege Escalation

CVE ID

CVE-2018-10381

Product

CyberGhost 6 for Windows

Date

4 May 2018

Vulnerability

Privilege Escalation

CVE ID

CVE-2018-10646

Product

SaferVPN for Windows

Date

3 May 2018

Vulnerability

Privilege Escalation

CVE ID

CVE-2018-10647

Product

VyprVPN for Windows

Date

2 May 2018

Vulnerability

Privilege Escalation

CVE ID

CVE-2018-10645

Product

PureVPN for Windows

Date

18 April 2018

Vulnerability

Privilege Escalation

CVE ID

CVE-2018-10204

Product

IPVanish for MacOS

Date

17 April 2018

Vulnerability

Root Privilege Escalation

CVE ID

CVE-2018-10192

Product

Private Internet Access VPN Client for Windows

Date

17 April 2018

Vulnerability

Privilege Escalation

CVE ID

CVE-2018-10190

Product

MacKeeper

Date

17 April 2018

Vulnerability

Privilege Escalation

CVE ID

CVE-2018-10171

Product

ProtonVPN for Windows

Date

16 April 2018

Vulnerability

Privilege Escalation

CVE ID

CVE-2018-10169

Product

NordVPN for Windows

Date

16 April 2018

Vulnerability

Privilege Escalation

CVE ID

CVE-2018-10170

Product

NordVPN for MacOS

Date

29 March 2018

Vulnerability

Privilege Escalation

CVE ID

CVE-2018-9105

Product

VPN Unlimited for MacOS

Date

14 March 2018

Vulnerability

Root Privilege Escalation

CVE ID

CVE-2018-8739

Product

ZenMate VPN for MacOS

Date

13 March 2018

Vulnerability

Type Confusion

CVE ID

CVE-2018-8076

Product

PrivateVPN for MacOS

Date

12 March 2018

Vulnerability

Root Privilege Escalation | XPC config

CVE ID

CVE-2018-7716

Product

PrivateVPN for MacOS

Date

5 March 2018

Vulnerability

Root Privilege Escalation | XPC path Parameter

CVE ID

CVE-2018-7716

Product

PrivateVPN for MacOS

Date

5 March 2018

Vulnerability

Root Privilege Escalation Vulnerability | Arbitrary File Write

CVE ID

CVE-2018-7311

Product

CactusVPN for MacOS

Date

5 March 2018

Vulnerability

Root Privilege Escalation Vulnerability | XPC

CVE ID

CVE-2018-7493

Product

PureVPN for MacOS

Date

26 February 2018

Vulnerability

Root Privilege Escalation

CVE ID

CVE-2018-6822

Product

Shimo VPN Client for MacOS

Date

26 February 2018

Vulnerability

Root Privilege Escalation

CVE ID

CVE-2018-6823

Product

VyprVPN for MacOS

Date

26 February 2018

Vulnerability

Privilege Escalation

CVE ID

CVE-2017-17809

Product

Dolphin Browser for Android

Date

26 February 2018

Vulnerability

Arbitrary File Write

CVE ID

CVE-2017-17551

Product

CactusVPN for MacOS

Date

21 February 2018

Vulnerability

Root Privilege Escalation | setuid

CVE ID

CVE-2018-7281

Product

Foxit MobilePDF for Android

Date

12 January 2018

Vulnerability

Path Traversal

CVE ID

Product

Dolphin Browser for Android

Date

20 December 2017

Vulnerability

Intent URI Scheme

CVE ID

CVE-2017-17553

Let us build a tailored engagement for you.

We are an international squad of professionals working as one.

logos