GCVE - cpe:2.3:a:zizai_technology:tech_nut_mobile

Approved changes feed: RSS · Atom

cpe:2.3:a:zizai_technology:tech_nut_mobile_application:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Zizai Technology (`9fafd547-838f-59c0-aba6-71f26b5e915f`)
Product	Tech Nut Mobile Application (`9641386c-ca62-5464-9df4-429d81d69bc9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-6548`	under_investigation	2026-06-08 05:08:02.723118	Zizai Tech Nut mobile application makes requests using HTTP, which includes the users session token The Zizai Tech Nut mobile app makes requests via HTTP instead of HTTPS. These requests contain the user's authenticated session token with the URL. An attacker can capture these requests and reuse the session token to gain full access the user's account. Published: 2018-07-13T20:00:00.000Z Updated: 2024-08-06T01:36:27.302Z Open on db.gcve.eu Reference links https://www.securityfocus.com/bid/93877 https://blog.rapid7.com/2016/10/25/multiple-bluetooth-low-energy-ble-tracker-vulnerabilities/ https://www.kb.cert.org/vuls/id/402847	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-6547`	under_investigation	2026-06-08 05:08:02.721838	Zizai Tech Nut stores the account password in cleartext The Zizai Tech Nut mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file. Published: 2018-07-13T20:00:00.000Z Updated: 2024-08-06T01:36:27.383Z Open on db.gcve.eu Reference links https://www.securityfocus.com/bid/93877 https://blog.rapid7.com/2016/10/25/multiple-bluetooth-low-energy-ble-tracker-vulnerabilities/ https://www.kb.cert.org/vuls/id/402847	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.