agentprime: shenzhen-shine-industrial-co-ltd-vitafitEvery new CVE for shenzhen-shine-industrial-co-ltd-vitafit.https://agentprime.io/CVE-2026-54384: VitaFit Cloud API Authentication Bypass via POST /front/login/sns/https://agentprime.io/advisories/CVE-2026-54384/https://agentprime.io/advisories/CVE-2026-54384/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 22:23:39 GMTCVEcriticalCVE-2026-54383: VitaFit Cloud API Excessive Data Exposure via relation/search Endpointhttps://agentprime.io/advisories/CVE-2026-54383/https://agentprime.io/advisories/CVE-2026-54383/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 22:21:46 GMTCVECVE-2026-54382: VitaFit Cloud API AWS IAM Misconfiguration via Cognito S3 Accesshttps://agentprime.io/advisories/CVE-2026-54382/https://agentprime.io/advisories/CVE-2026-54382/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 22:18:18 GMTCVECVE-2026-54381: VitaFit Cloud API Storage Bucket Unauthenticated Access Information Disclosurehttps://agentprime.io/advisories/CVE-2026-54381/https://agentprime.io/advisories/CVE-2026-54381/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 22:15:10 GMTCVECVE-2026-54380: VitaFit Cloud API Stored XSS via SVG File Uploadhttps://agentprime.io/advisories/CVE-2026-54380/https://agentprime.io/advisories/CVE-2026-54380/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 22:10:52 GMTCVECVE-2026-54378: VitaFit Cloud API Broken Access Control via S3 Token Endpointhttps://agentprime.io/advisories/CVE-2026-54378/https://agentprime.io/advisories/CVE-2026-54378/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 22:09:16 GMTCVEcriticalCVE-2026-54377: VitaFit Cloud API IDOR via profile_id Endpointshttps://agentprime.io/advisories/CVE-2026-54377/https://agentprime.io/advisories/CVE-2026-54377/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 22:04:57 GMTCVECVE-2026-54376: VitaFit Android < 2.8.1.0 Custom URI Scheme Token Hijackinghttps://agentprime.io/advisories/CVE-2026-54376/https://agentprime.io/advisories/CVE-2026-54376/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 22:01:47 GMTCVECVE-2026-54375: VitaFit Android < 2.8.1.0 Long-Lived Session Token Exposurehttps://agentprime.io/advisories/CVE-2026-54375/https://agentprime.io/advisories/CVE-2026-54375/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:54:23 GMTCVECVE-2026-54374: VitaFit Android < 2.8.1.0 Hardcoded Credentials Disclosurehttps://agentprime.io/advisories/CVE-2026-54374/https://agentprime.io/advisories/CVE-2026-54374/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:53:33 GMTCVECVE-2026-54373: VitaFit Android < 2.8.1.0 Cleartext Traffic via Missing Network Security Confighttps://agentprime.io/advisories/CVE-2026-54373/https://agentprime.io/advisories/CVE-2026-54373/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:51:30 GMTCVECVE-2026-54372: VitaFit Android < 2.8.1.0 Insecure TLS Certificate Validationhttps://agentprime.io/advisories/CVE-2026-54372/https://agentprime.io/advisories/CVE-2026-54372/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:50:12 GMTCVE