Grab: Authorization bypass using login by phone option+horizontal escalation possible on Grab Android App

Description: After my previous report about 2FA bypass on the Profile Edit endpoint i was interested to find enpoint, which will allow me horizontal privileges escalation. So, I found the endpoint using android app https://p.grabtaxi.com/api/passenger/v2/profiles/activationsms which allow me to...

UBUNTU-CVE-2017-0434

An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the touchscreen chipset. This issue is rated as High because it first requires compromising a privileged process. Product: Android...

Business LaLa Call App for Android fails to verify SSL server certificates

Overview Business LaLa Call App for Android provided by K-Opticom Corporation fails to verify SSL server certificates. Yuto Iso of NTT Security Japan KK reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A...

Grab: Two-factor authentication bypass on Grab Android App

Description I found the endpoint using android app https://p.grabtaxi.com/api/passenger/v2/profiles/edit which allow me to bypass 2FA sms code due to lack of rate limiting\code expiration after unsuccessful attempts. The root cause of the problem it that facts: no rate limiting+ no code expiratio...

DOBBY Pocket Drone App for Android Arbitrary Password Reset Vulnerability

Zero Intelligent Control Beijing Intelligent Technology Co., Ltd. is committed to becoming the world's top supplier of intelligent aircraft products and intelligent drone total solutions.DOBBY Pocket Drone is one of the company's products. DOBBY Pocket Drone APP Android version has an arbitrary...

Ubiquiti Robotics Alpha2 Android app has arbitrary password reset vulnerability

Ubitus is a company that integrates artificial intelligence and humanoid robotics research and development, platform software development and utilization, and product sales. An arbitrary password reset vulnerability exists in the Ubitus Robotics Alpha2 Android app. The vulnerability allows an...

The Bank of Tokyo-Mitsubishi UFJ for Android vulnerable to SSL/TLS downgrade attack

Overview The Bank of Tokyo-Mitsubishi UFJ for Android may be exploited by SSL/TLS downgrade attack. The Bank of Tokyo-Mitsubishi UFJ for Android provided by The Bank of Tokyo-Mitsubishi UFJ, Ltd. tries to communicate with a server via TLS v1.2. However, when a response from the server indicates S...

Researchers Show How to Steal Tesla Car by Hacking into Owner's Smartphone

New technology is always a little scary, so are Smart Cars. From GPS system and satellite radio to wireless locks, steering, brakes, and accelerator, today vehicles are more connected to networks than ever, and so they are more hackable than ever. It's not new for security researchers to hack...

Xi'an Concert Hall App Payment Logic Vulnerability

Xi'an Concert Hall Android Client is a smartphone application that provides Xi'an Concert Hall performance inquiry and ticket purchase. A payment logic vulnerability exists in the Xi'an Concert Hall app. An attacker can modify the payment amount by bypassing the bank verification mechanism by...

Boozt Fashion AB: Cookie Misconfiguration

Hello, Great Day, I just want to Inform You that i Founded an Misconfiguration in your Website with android app. Steps to Reproduce ==================== 1.Login in to your Website https://www.boozt.com/login 2.Login with same account on android 3.Change Password ion Website 4.As You See That pass...

Gesture Lock Vulnerability in Your Money Management Android Client

You and I loan is an Internet financial investment platform. It provides users with convenient, low-threshold personal loans and investment services. There is a vulnerability in the gesture lock of YouMeLoan's financial management Android client, which allows attackers to bypass a layer of...

Renren Android client gesture lock vulnerability

Renren focuses on personal mortgage business and is committed to providing professional financial information services for individuals and small and medium-sized enterprises. A vulnerability in the gesture lock of Renren Caixuan's Android client allows an attacker to bypass a layer of...

Boozt Fashion AB: Android app does not use SSL for login

We tested the Android app, v2.0.2 To replicate: Install the app, and run it until you reach the login screen. Install PacketCapture: https://play.google.com/store/apps/details?id=app.greyshirts.sslcapture Go to PacketCapture, go through setup, SKIP the SSL certificate install process Activate...

Acer Portal app for Android SSL Certificate Validation Vulnerability

Acer Portal app for Android is a suite of Android-based portals for registering Acer products from Acer. A security vulnerability exists in Acer Portal app for Android versions 3.9.3.2003 through 3.9.3.2006 that can be exploited by remote attackers to impersonate Acer Cloud and obtain user...

Nextcloud: Uploading files to a folder where invited user don't have any EDIT privilege

Hi, Any invited user to a shared folder with no edit privilege can create files in it through copy feature of Nextclod android app. Steps to reproduce it + Create any folder and invite a user in it without any edit privilege. + Now login from invited user account through android app. + Copy any...

Arrests Made In $45M Russian Bank Hack

Russian law enforcement has made 50 arrests in connection with a five-year operation to steal three billion rubles just shy of $45 million USD from the country’s largest bank, Sberbank. The hackers are alleged to have exploited websites, including popular news sites, to infect victims with the Lu...

kintone mobile for Android fails to verify SSL server certificates

Overview kintone mobile for Android provided by Cybozu, Inc. fails to verify SSL server certificates. Kusano Kazuhiko reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A man-in-the-middle attack may allow an...

kintone mobile for Android information management vulnerability

Overview kintone mobile for Android provided by Cybozu, Inc. contains an authentication information management vulnerability. Kusano Kazuhiko and Gopinath reported this vulnerability to the developer. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...

More than 1 million People now access Facebook Over Tor Network

In Brief Facebook has hit another Milestone: More than 1 MILLION people, or you can say privacy conscious, are accessing Facebook over TOR. Facebook proudly announced today that, this month, for the first time, the people connected to the anonymous version of Facebook that's accessible only throu...

Cherish.com Android APP Man-in-the-Middle Attack Vulnerability

Cherish.com is a matchmaking site. A man-in-the-middle attack vulnerability exists in the Zhenai.com Android APP, where the software does not verify the validity of the TLS certificate when logging in, resulting in a man-in-the-middle that can use self-signed certificates to carry out an attack,...