[ Vendor · 12 CVEs ]
Shenzhen Shine Industrial Co., Ltd.
CVEs affecting Shenzhen Shine Industrial Co., Ltd. published in the last 30 days, plus any Shenzhen Shine Industrial Co., Ltd. CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-54381 | 4 Nov 2026 | CVSS 7.5 | Shenzhen Shine Industrial Co., Ltd. VitaFitVitaFit cloud API before 2026-10-30 contained a misconfigured cloud storage bucket vulnerability that allows unauthenticated attackers to list and… | |
| CVE-2026-54382 | 4 Nov 2026 | CVSS 7.7 | Shenzhen Shine Industrial Co., Ltd. VitaFitVitaFit cloud API before 2026-10-30 contained an improper access control vulnerability in its Cognito-issued AWS role that allows authenticated… | |
| CVE-2026-54383 | 4 Nov 2026 | CVSS 6.5 | Shenzhen Shine Industrial Co., Ltd. VitaFitVitaFit cloud API before 2026-10-30 contained an excessive data exposure vulnerability that allows any authenticated user to query the GET… | |
| CVE-2026-54384 | 4 Nov 2026 | CVSS 9.8 | Shenzhen Shine Industrial Co., Ltd. VitaFitVitaFit cloud API before 2026-10-30 contained an authentication bypass vulnerability that allows remote attackers to obtain a full session for a… | |
| CVE-2026-54380 | 4 Nov 2026 | CVSS 5.4 | Shenzhen Shine Industrial Co., Ltd. VitaFitVitaFit cloud API before 2026-10-30 contained a stored cross-site scripting vulnerability that allows authenticated attackers to upload an SVG image… | |
| CVE-2026-54374 | 4 Nov 2026 | CVSS 7.5 | Shenzhen Shine Industrial Co., Ltd. VitaFitVitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a hardcoded credentials vulnerability that allows attackers to extract… | |
| CVE-2026-54375 | 4 Nov 2026 | CVSS 8.4 | Shenzhen Shine Industrial Co., Ltd. VitaFitVitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure session management vulnerability that allows attackers to extract or… | |
| CVE-2026-54376 | 4 Nov 2026 | CVSS 8.2 | Shenzhen Shine Industrial Co., Ltd. VitaFitVitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure custom URI scheme vulnerability that allows a malicious application… | |
| CVE-2026-54377 | 4 Nov 2026 | CVSS 6.5 | Shenzhen Shine Industrial Co., Ltd. VitaFitVitaFit cloud API before 2026-10-30 contained an insecure direct object reference vulnerability that allows authenticated attackers to access another… | |
| CVE-2026-54378 | 4 Nov 2026 | CVSS 9.6 | Shenzhen Shine Industrial Co., Ltd. VitaFitVitaFit cloud API before 2026-10-30 contained a broken access control vulnerability that allows any authenticated user to obtain temporary AWS… | |
| CVE-2026-54372 | 4 Nov 2026 | CVSS 8.8 | Shenzhen Shine Industrial Co., Ltd. VitaFitVitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure TLS/SSL certificate validation vulnerability that allows… | |
| CVE-2026-54373 | 4 Nov 2026 | CVSS 3.5 | Shenzhen Shine Industrial Co., Ltd. VitaFitVitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a cleartext traffic vulnerability that allows network-based attackers to… |