iOS and Android app for mobile banking with biometric authentication
Direct string concatenation in SQL queries allows attackers to inject malicious SQL code. This vulnerability could allow complete database compromise including data extraction, modification, or deletion.
Direct string concatenation in SQL queries allows attackers to inject malicious SQL code. This vulnerability could allow complete database compromise including data extraction, modification, or deletion.
Rendering unsanitized user input directly into DOM allows script injection attacks. Attackers can steal session cookies, perform unauthorized actions, or redirect users to malicious sites.
Rendering unsanitized user input directly into DOM allows script injection attacks. Attackers can steal session cookies, perform unauthorized actions, or redirect users to malicious sites.
Rendering unsanitized user input directly into DOM allows script injection attacks. Attackers can steal session cookies, perform unauthorized actions, or redirect users to malicious sites.
Permission 777 grants full access to all users, violating DISA STIG APSC-DV-002320 principle of least privilege. This creates unnecessary attack surface and potential for privilege escalation.
Permission 777 grants full access to all users, violating DISA STIG APSC-DV-002320 principle of least privilege. This creates unnecessary attack surface and potential for privilege escalation.
Permission 777 grants full access to all users, violating DISA STIG APSC-DV-002320 principle of least privilege. This creates unnecessary attack surface and potential for privilege escalation.
Permission 777 grants full access to all users, violating DISA STIG APSC-DV-002320 principle of least privilege. This creates unnecessary attack surface and potential for privilege escalation.
Direct string concatenation in SQL queries allows attackers to inject malicious SQL code. This vulnerability could allow complete database compromise including data extraction, modification, or deletion.
Direct string concatenation in SQL queries allows attackers to inject malicious SQL code. This vulnerability could allow complete database compromise including data extraction, modification, or deletion.
Direct string concatenation in SQL queries allows attackers to inject malicious SQL code. This vulnerability could allow complete database compromise including data extraction, modification, or deletion.
Direct string concatenation in SQL queries allows attackers to inject malicious SQL code. This vulnerability could allow complete database compromise including data extraction, modification, or deletion.
Direct string concatenation in SQL queries allows attackers to inject malicious SQL code. This vulnerability could allow complete database compromise including data extraction, modification, or deletion.