CVE-2019-17356

The Infinite Design application 3.4.12 for Android sends a username and password via TCP without any encryption during login, as demonstrated by sniffing of a public Wi-Fi network.

• CWE-319
• CWE-522

• https://bit.ly/2kfL7xEExploit, Third Party Advisory
• https://pastebin.com/yUFxs2J7Exploit, Third Party Advisory
• https://bit.ly/2kfL7xEExploit, Third Party Advisory
• https://pastebin.com/yUFxs2J7Exploit, Third Party Advisory

Published

Oct 15, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-17350An issue was discovered in Xen through 4.12.x allowing Arm d…5.5
• CVE-2019-17351An issue was discovered in drivers/xen/balloon.c in the Linu…6.5
• CVE-2019-17352In JFinal cos before 2019-08-13, as used in JFinal 4.4, ther…7.5
• CVE-2019-17353An issue discovered on D-Link DIR-615 devices with firmware …8.2
• CVE-2019-17354wan.htm page on Zyxel NBG-418N v2 with firmware version V1.0…9.4
• CVE-2019-17355In the Orbitz application 19.31.1 for Android, the username …9.8
• CVE-2019-17357Cacti through 1.2.7 is affected by a graphs.php?template_id=…6.5
• CVE-2019-17358Cacti through 1.2.7 is affected by multiple instances of lib…8.1
• CVE-2019-17359The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 …7.5
• CVE-2019-1736A vulnerability in the firmware of the Cisco UCS C-Series Ra…6.6
• CVE-2019-17360A vulnerability in Hitachi Command Suite 7.x and 8.x before …7.5
• CVE-2019-17361In SaltStack Salt through 2019.2.0, the salt-api NET API wit…9.8