← All credits
Jose Lomeli
12 vulnerability records and advisories credit this contributor.
CVE-2026-54384
VitaFit Cloud API Authentication Bypass via POST /front/login/sns/
CVE-2026-54383
VitaFit Cloud API Excessive Data Exposure via relation/search Endpoint
CVE-2026-54382
VitaFit Cloud API AWS IAM Misconfiguration via Cognito S3 Access
CVE-2026-54381
VitaFit Cloud API Storage Bucket Unauthenticated Access Information Disclosure
CVE-2026-54380
VitaFit Cloud API Stored XSS via SVG File Upload
CVE-2026-54378
VitaFit Cloud API Broken Access Control via S3 Token Endpoint
CVE-2026-54377
VitaFit Cloud API IDOR via profile_id Endpoints
CVE-2026-54376
VitaFit Android < 2.8.1.0 Custom URI Scheme Token Hijacking
CVE-2026-54375
VitaFit Android < 2.8.1.0 Long-Lived Session Token Exposure
CVE-2026-54374
VitaFit Android < 2.8.1.0 Hardcoded Credentials Disclosure