CVE-2016-1519

The com.softphone.common package in the Grandstream Wave app 1.0.1.26 and earlier for Android does not properly validate SSL certificates, which allows man-in-the-middle attackers to spoof the Grandstream provisioning server via a crafted certificate...

Driver's Choice Android app suffers from arbitrary account login vulnerability

Driving Chant is an electric car time-sharing platform developed by Spruce Wisdom. A vulnerability exists in the Driving Chant Android app. The vulnerability is due to a design flaw in the SMS verification code login function, which can be exploited by an attacker to log in to another person's...

LeEco Zero Pie Enjoy Android app has an arbitrary account login vulnerability

ZeroPai Lexiang is an electric car time-share rental platform launched by LeTV Group. There is an arbitrary account login vulnerability in the Android app of LeTV ZeroPai Lexian. Due to design flaws in the cell phone SMS verification code login function, cracking the sign signature algorithm lead...

Arbitrary Password Reset Vulnerability in Kingsoft Wordsmith Android App

Kingsoft Wordsmith is a translation and learning software from Kingsoft Corporation. An arbitrary password reset vulnerability exists in Kingsoft wordmaster android app. Due to a design flaw in the feature of changing cell phone number, an attacker can reset the password of another person by only...

Arbitrary User Password Reset Vulnerability in Kingsoft Wordsmith Android App

Kingsoft Wordsmith is a free translation and learning software from Kingsoft. Kingsoft wordmaster android app there is any user password reset vulnerability, the vulnerability arises from the change of password did not increase the verification of the old password due to the attacker can take...

Game Multi Android app has design flaws in password recovery feature

Game Multi app is a software that focuses on serving game users. Game Multi Android app has a vulnerability in the design of the password recovery function, which can be exploited by an attacker to change his password through another person's cell phone number, log in to the system and obtain...

Arbitrary Account Login Vulnerability in Dingtone Travel App

Dingtone Travel APP is a new energy car sharing platform based on internet technology. A design flaw vulnerability exists in the Dingtone Mobility Android APP's cell phone SMS verification code login function, allowing attackers to exploit the vulnerability to log in to another person's account...

Grab: Private Grab Messages on Android App can be accessed and cached by Search Engines

Description Hello. Today i discovered, that Search Engines can access the private users messages OTP pins, Group invites information etc. It happens because the https://grab-attention.grabtaxi.com host allows search indexing, and can leak the authtoken to the Search Engines which also can lead to...

Panda Car Android APP has arbitrary cell phone number login vulnerability

Panda Car Android APP is a car sharing software. The Panda Car Android APP suffers from an arbitrary cell phone number login vulnerability. The vulnerability allows an attacker to log in to another person's account using only their cell phone number...

CVE-2017-0547

An information disclosure vulnerability in libmedia in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it is a general bypass for operating system protections that isolate application data from other...

CVE-2017-2387

The Apple Music aka com.apple.android.music application before 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Jiangcheng Yi Bicycle Android APP cell phone SMS verification function has any cell phone number login vulnerability

Jiangcheng Easy Bike Android APP is a local intelligent public bicycle rental system for Wuhan. There is an arbitrary cell phone number login vulnerability in the SMS verification function of Jiangcheng Yi Bicycle Android APP. This allows an attacker to log in to another person's account by simpl...

Design/Logic Flaw

There is Missing SSL Certificate Validation in the Trend Micro Enterprise Mobile Security Android Application before 9.7.1193, aka VRTS-398...

Coolbike Android APP has arbitrary cell phone number login vulnerability

Coolbike Android APP is a mobile bike rental service software created by Shenzhen Venture Win Network Technology Co. Coolbike Android APP has an arbitrary cell phone number login vulnerability, allowing attackers to exploit the vulnerability to log in to their accounts with only another person's...

Bubai Bike Android APP has arbitrary cell phone number login vulnerability

Coolbike Android APP is a mobile bike rental service software created by Shenzhen Venture Win Network Technology Co. There is an arbitrary cell phone number login vulnerability in the Bai Bai Bicycle Android APP, allowing attackers to exploit the vulnerability to log in to their accounts with onl...

DOBBY Pocket Drone Android App Signature Has Arbitrary Password Reset Vulnerability

Zero Intelligent Control Beijing Intelligent Technology Co., Ltd. is committed to becoming the world's top supplier of intelligent aircraft products and intelligent drone total solutions.DOBBY Pocket Drone is one of the company's products. There is an arbitrary password reset vulnerability in the...

Arbitrary Password Reset Vulnerability in RideSmart Android App

Ride Free Android AP is a mobile application to keep your vehicle safe. Ride Carefree Android APP has an arbitrary password reset vulnerability that allows an attacker to exploit the vulnerability to change the password of the other party simply by knowing their cell phone number to gain access t...

Wise Dogs Android App Has Arbitrary Password Reset Vulnerability

Smart Home Dog Android App is an application about wireless access control intercom system,wireless smart home system. Smart Home Dog Android App has an arbitrary password reset vulnerability. Allow attackers only need to know each other's cell phone number to change their passwords, leaking...

Panasonic Smart Lock Android App Has Arbitrary Password Reset Vulnerability

Panasonic Smart Lock Android App is a smart hardware device. Panasonic Smart Lock Android App has an arbitrary password reset vulnerability. Allows an attacker to change the other party's password simply by knowing their cell phone number and obtain sensitive user information...

UBUNTU-CVE-2017-0334

An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions:...