CVE-2019-13098

The user password via the registration form of TronLink Wallet 2.2.0 is stored in the log when the class CreateWalletTwoActivity is called. Other authenticated users can read it in the log later. The logged data can be read using Logcat on the device. When using platforms prior to Android 4.1 (Jelly Bean), the log data is not sandboxed per application; any application installed on the device has the capability to read data logged by other applications.

• CWE-532

• https://pastebin.com/a5VhaxYnExploit, Third Party Advisory
• https://pastebin.com/raw/rVGbwSw0Exploit, Third Party Advisory
• https://pastebin.com/a5VhaxYnExploit, Third Party Advisory
• https://pastebin.com/raw/rVGbwSw0Exploit, Third Party Advisory

Published

Jul 22, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-13084XnView Classic 2.48 has a User Mode Write AV starting at xnv…
• CVE-2019-13085XnView Classic 2.48 has a User Mode Write AV starting at xnv…
• CVE-2019-13086core/MY_Security.php in CSZ CMS 1.2.2 before 2019-06-20 has …
• CVE-2019-1309A denial of service vulnerability exists when Microsoft Hype…6.8
• CVE-2019-13096TronLink Wallet 2.2.0 stores user wallet keystore in plainte…
• CVE-2019-13097The application API of Cat Runner Decorate Home version 2.8.…
• CVE-2019-13099The Momo application 2.1.9 for Android stores confidential i…
• CVE-2019-1310A denial of service vulnerability exists when Microsoft Hype…6.8
• CVE-2019-13100The Send Anywhere application 9.4.18 for Android stores conf…
• CVE-2019-13101An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04,…9.8
• CVE-2019-13103A crafted self-referential DOS partition table will cause al…7.1
• CVE-2019-13104In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an u…7.8