agentprime: tpc-software-matchpointEvery new CVE for tpc-software-matchpoint.https://agentprime.io/CVE-2026-111495: API keys, credentials, and configuration parameters embedded in the MatchPoint APKhttps://agentprime.io/advisories/CVE-2026-111495/https://agentprime.io/advisories/CVE-2026-111495/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 21:59:47 GMTCVECVE-2026-111494: Incorrect validation of TLS certificates in the MatchPoint Android apphttps://agentprime.io/advisories/CVE-2026-111494/https://agentprime.io/advisories/CVE-2026-111494/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 21:58:02 GMTCVEcriticalCVE-2026-111493: Lack of authentication and authorization in the Images.ashx endpoint in MatchPointhttps://agentprime.io/advisories/CVE-2026-111493/https://agentprime.io/advisories/CVE-2026-111493/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 21:56:17 GMTCVECVE-2026-111492: SQL injection in the push notification handler of the MatchPoint Android apphttps://agentprime.io/advisories/CVE-2026-111492/https://agentprime.io/advisories/CVE-2026-111492/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 21:53:32 GMTCVECVE-2026-111491: Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferenceshttps://agentprime.io/advisories/CVE-2026-111491/https://agentprime.io/advisories/CVE-2026-111491/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 21:51:47 GMTCVECVE-2026-111490: Insecure direct object reference (IDOR) vulnerability in the MatchPoint APIhttps://agentprime.io/advisories/CVE-2026-111490/https://agentprime.io/advisories/CVE-2026-111490/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 21:49:40 GMTCVEcriticalCVE-2026-111489: A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platformhttps://agentprime.io/advisories/CVE-2026-111489/https://agentprime.io/advisories/CVE-2026-111489/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 21:47:37 GMTCVEcritical