CVE-2018-11505

The Werewolf Online application 0.8.8 for Android allows attackers to discover the Firebase token by reading logcat output.

• CWE-200

• https://pastebin.com/NtPn3jB8Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/44776/Exploit, Third Party Advisory, VDB Entry
• https://pastebin.com/NtPn3jB8Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/44776/Exploit, Third Party Advisory, VDB Entry

Published

May 26, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1150NUUO's NVRMini2 3.8.0 and below contains a backdoor that wou…
• CVE-2018-11500An issue was discovered in PublicCMS V4.0.20180210. There is…
• CVE-2018-11501PHP Scripts Mall Website Seller Script 2.0.3 has CSRF via us…
• CVE-2018-11502An issue was discovered in the Moderator Log Notes plugin 1.…
• CVE-2018-11503The isfootnote function in markdown.c in libmarkdown.a in DI…
• CVE-2018-11504The islist function in markdown.c in libmarkdown.a in DISCOU…
• CVE-2018-11506The sr_do_ioctl function in drivers/scsi/sr_ioctl.c in the L…7.8
• CVE-2018-11507An issue was discovered in Free Lossless Image Format (FLIF)…
• CVE-2018-11508The compat_get_timex function in kernel/compat.c in the Linu…
• CVE-2018-11509ASUSTOR ADM 3.1.0.RFQ3 uses the same default root:admin user…
• CVE-2018-1151The web server on Western Digital TV Media Player 1.03.07 an…
• CVE-2018-11510The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauth…