Shenzhen Yuanzheng Technology golo Android APP has overstepped access vulnerability

golo APP is a social networking application that uses instant messaging as a communication platform to connect automotive repair technicians with car owners. Shenzhen Yuanzheng Technology's golo Android APP has an overstepping access vulnerability, which allows an attacker to view any registered...

Shenzhen Yuanzheng Technology X431-PRO 3S Android APP has an overstepping vulnerability

X431-PRO 3S APP is a vehicle fault detection system. The X431-PRO 3S Android APP of Shenzhen Yuanzheng Technology has an overstepping vulnerability. The attacker logs into the system and modifies the user ID by grabbing packets to view any account information, including: user name, cell phone...

Microtransit EV Android App has an override access vulnerability

Microbus EV APP is a car time-share rental service software. Microtransit EV Android APP has an override access vulnerability. After logging into the system, an attacker can view any account information, including user's name, cell phone number, ID number, account amount and other sensitive...

E-Charge APP for Android suffers from an override access vulnerability

E-Charge APP is a car charging service application, providing users with convenient electric vehicle charging functions, so that users can automatically check the nearest charging piles through the navigation, fast charging, and experience a green traveling life. E-Charge APP Android version of t...

libgig Denial of Service Vulnerability

libgig is a C++ library for loading, modifying and creating Gigasamlier and DLS files. A denial of service vulnerability exists in the 'gig::DimensionRegion::CreateVelocityTable' function of the gig.cpp file in libgig version 4.0.0. A remote attacker can exploit this vulnerability to cause a deni...

Directory Traversal Vulnerability in Smart Audi App for Android

Smart Audi APP is a car service software for Audi owner users, providing vehicle physical examination, search navigation, fuel consumption statistics and other services. Wisdom Audi APP Android version has a directory traversal vulnerability, attackers can use the vulnerability to directly downlo...

CAPTCHA Bypass Vulnerability in FAW-Volkswagen After-Sales Service App Android Version

FAW-VW After-sales Service APP is a software that provides professional after-sales service. Through this software, you can call roadside assistance with one click at anytime and anywhere. The software also provides personal automobile information, online reservation and automobile repair progres...

Logic flaws in the Android version of the Shandong government services app

Shandong government service APP is a government information software created by the Shandong Government Office. The software can release the latest information of Shandong government services in time, support personalized subscription, full-text search function, to provide faster service for the...

Fusion Router App for Android suffers from an overstepping access vulnerability

Fusion Router APP is a mobile network management tool for cell phones. The software works with Fusion Router to remotely view and manage the router, as well as set the internet time. Fusion Router APP for Android suffers from an overstepping access vulnerability, which can be exploited by an...

Wheat Home Edition Android App Has Logic Design Flaw

Wheat Home Edition app is a video surveillance software that provides PV monitoring services. Wheat Home Edition Android App has a logic flaw vulnerability. Allows an attacker to exploit the vulnerability to reset the password of any user of the power station with just the UID...

Wheat Home Edition Android App Has Override Access Vulnerability

Wheat Home Edition app is a video surveillance software that provides PV monitoring services. Wheat Home Edition Android App suffers from an override access vulnerability. Attackers can utilize the vulnerability to arbitrarily view sensitive information such as user's cell phone number, email...

Wheat Pro Android App Has Logic Design Flaw

Wheat Pro app is a mobile office software that integrates PV plant monitoring, work order processing, PV plant troubleshooting and other functions. Wheat Pro Android App has a logic flaw vulnerability. Allows attackers to exploit the vulnerability to reset any enterprise power plant password with...

Arbitrary Account Password Reset Vulnerability in PV Guard Android APP

PV Guard is a PV monitoring and operation management platform based on big data and knowledge base. The PV Guard Android APP has an arbitrary account password reset vulnerability, which allows attackers to exploit the vulnerability to change the password of the other party's cell phone number onl...

Instant Judgment Android app has arbitrary cell phone number login vulnerability

Instant Judgment app is a life service application, which is an automobile service platform built by Six Points North Technology. Instant Judge Android app has arbitrary cell phone number login leakage. Attackers only need other people's cell phone numbers to log into other accounts...

Information leakage vulnerability in Aliyun OSS credentials of McBaoBao's Android client

Mbaobao Android is a mobile Android shopping software produced by the fashion luggage B2C website Mbaobao Honor. Mbaobao Android client AliCloud OSS credentials information leakage vulnerability. The vulnerability is caused by credential leakage due to the use of SDK with accessKeyId and...

CVE-2016-7812

The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android ver5.3.1, ver5.2.2 and earlier allow a man-in-the-middle attacker to downgrade the communication between the app and the server from TLS v1.2 to SSL v3.0, which may result in the attacker to eavesdrop on an encrypted communication...

Boozt Fashion application for Android information disclosure vulnerability

Boozt Fashion application for Android is a mobile application for online shopping based on Android platform by Boozt Sweden. A security vulnerability exists in the Boozt Fashion application for Android prior to version 2.3.4. A remote attacker can exploit the vulnerability to read login credentia...

CVE-2017-11129

An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android. The keystore is locked with a hard-coded password. Therefore, everyone with access to the keystore can read the content out, for example the private key of the user...

Shenzhen Armed Police Hospital's Android APP suffers from overstepping access vulnerability

"Shenzhen Armed Police Hospital" is the Shenzhen Armed Police Hospital official cell phone application software, designed to simplify the process of medical treatment on the basis of the hospital's existing services, reduce the waiting time for medical treatment, convenient for patients to seek...

CVE-2017-11706

The Boozt Fashion application before 2.3.4 for Android allows remote attackers to read login credentials by sniffing the network and leveraging the lack of SSL. NOTE: the vendor response, before the application was changed to enable SSL logins, was "At the moment that is an accepted risk. We only...