VYPR

Hotspot Shield

by AnchorFree

CVEs (1)

  • CVE-2018-6460HigJan 31, 2018
    risk 0.53cvss 7.5epss 0.11

    Hotspot Shield runs a webserver with a static IP address 127.0.0.1 and port 895. The web server uses JSONP and hosts sensitive information including configuration. User controlled input is not sufficiently filtered: an unauthenticated attacker can send a POST request to…