CureSkin Skin Treatment Exposed 6 Million Records

CureSkin, “India’s #1 Skin Treatment App” (5M+ d/l in GooglePlay), exposes personal data of its customers via unprotected DB. Incl. 6M+ records with: name, phone, hashed password, orders, private notes, links to the ext.storages w/ face photos taken by app and more. No response!

About The Author

Bob Diachenko

Cyber Threat Intelligence @ http://securitydiscovery.com, journalist, OSINT | Responsible disclosures | Security consultancy

See author's posts