TPC Software Matchpoint güvenlik açıkları
TPC Software
- Toplam açık
- 7
- Kritik
- 3
- Aktif istismar
- 0
- Yaması çıkan
- 7
- Son açık
- 2 sa önce
Önem dağılımı
- Kritik 3
- Yüksek 2
- Orta 2
- Düşük 0
Son açıklar
7 açık
- 5,1Orta CVE-2026-111495Yama var API keys, credentials, and configuration parameters embedded in the MatchPoint APK
- 9,1Kritik CVE-2026-111494Yama var Incorrect validation of TLS certificates in the MatchPoint Android app
- 8,7Yüksek CVE-2026-111493Yama var Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint
- 8,6Yüksek CVE-2026-111492Yama var SQL injection in the push notification handler of the MatchPoint Android app
- 6,9Orta CVE-2026-111491Yama var Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferences
- 9,9Kritik CVE-2026-111490Yama var Insecure direct object reference (IDOR) vulnerability in the MatchPoint API
- 9,9Kritik CVE-2026-111489Yama var A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform