Multiple Vulnerabilities in the Magic Fly Broker App

Magic Fly Broker App is a mobile listing management software designed to help brokers increase orders. There are arbitrary user login and arbitrary password reset vulnerabilities in MagicFly Broker APP. Attackers can register any account and reset any password by capturing packets and interceptin...

Tongcun Village App suffers from arbitrary user login vulnerability

Tongcun Village App is a smart travel application for villagers. There is an arbitrary user login vulnerability in Tongcun Village APP. Attackers can log in to any user account by grabbing packets and bursting the verification code...

Men's Health App Has Arbitrary User Login Vulnerability

Men's Health App is a men's health support tool app. There is an arbitrary user login vulnerability in Men's Health APP. Attackers can login to any account registration by grabbing packets to get the verification code...

Arbitrary User Login Vulnerability in Campusplus App

Campusplus App is a campus life management software. Campusplus App is vulnerable to an arbitrary user login vulnerability, where an attacker can bypass the authentication code by typing 0000 at the code...

Multiple Vulnerabilities in the Famous Streets App

Famous Street APP is a fashion and life single product shopping guide software. There are SMS bombing and arbitrary user login vulnerabilities in the Famous Products Street APP. Attackers can consume server resources and cause denial of service by sending unlimited verification codes to cell...

Multiple Vulnerabilities in the Top Discount App

Top Discount App is a mobile shopping application. Top Discount App is vulnerable to override, arbitrary user login and denial of service vulnerabilities, which allow attackers to log in to other users' systems and perform unauthorized operations by grabbing packets and modifying cell phone...

Rent 8 Rings APP suffers from Arbitrary Explosion and Arbitrary Login Vulnerability

Rent 8 Rings APP is a cell phone software for online electric car sharing and renting by Jiangsu Rent 8 Rings Intelligent Technology Cable Company. Rent 8 Rings APP exists arbitrary blasting arbitrary login vulnerability. Attackers can log in to the task account by grabbing packets and blasting t...

On Wine App Has Logic Flaws

On Wine APP is a wine appraisal platform. There is a logic vulnerability in On Wine APP, which can be exploited by an attacker to arbitrarily register users, arbitrarily log in users, and arbitrarily change passwords...

Willow Police App Has Arbitrary Account Login Vulnerability

Liuzhou Police APP is a police information application platform launched by Liuzhou Municipal Public Security Bureau. Liuzhou Police APP has an arbitrary account login vulnerability. By means of CAPTCHA blasting, an attacker can log in to any account through a cell phone number...

Jiaxing Public Security App Has Arbitrary Account Login Vulnerability

Jiaxing Public Security APP is a convenient mobile application for local people in Jiaxing to find local services, mainly including motor vehicle violation inquiry, immigration office appointment, police news, security, police map, law enforcement public and other functional services. Jiaxing...

China Telecom's WingCloud Campus app has logic design flaws

China Telecom's Wing Cloud Campus app is a campus integrated service mobile manager. A logical design vulnerability exists in China Telecom's Wing Cloud Campus app. An attacker can exploit the vulnerability to arbitrarily log in to the system...

Tootsie Bus Android app suffers from a cracked sign signature algorithm leading to arbitrary phone number login vulnerability

Tuk Tuk Bus is a bus shuttle customization mobile service platform for people who have the same travel needs. The Tuk Tuk Bus Android app suffers from a cracked sign signature algorithm leading to an arbitrary cell phone number login vulnerability. An attacker can exploit this vulnerability to lo...

LeEco Zero Pie Enjoy Android app has an arbitrary account login vulnerability

ZeroPai Lexiang is an electric car time-share rental platform launched by LeTV Group. There is an arbitrary account login vulnerability in the Android app of LeTV ZeroPai Lexian. Due to design flaws in the cell phone SMS verification code login function, cracking the sign signature algorithm lead...

Coolbike Android APP has arbitrary cell phone number login vulnerability

Coolbike Android APP is a mobile bike rental service software created by Shenzhen Venture Win Network Technology Co. Coolbike Android APP has an arbitrary cell phone number login vulnerability, allowing attackers to exploit the vulnerability to log in to their accounts with only another person's...

Variable Override Vulnerability in DuomiCms_V1.32

DuomiCms is a specialized video-on-demand system. A variable override vulnerability exists in the common.php page of DuomiCms version 1.32. An attacker can exploit the vulnerability to cause arbitrary login in the background...

Arbitrary Login Vulnerability in RAS System of Shenzhen Comay Communication Technology Co.

Techmart iRAS Remote Application Solution is a remote rapid application access solution that combines TS terminal technology to provide network interconnection architecture while centrally distributing a variety of applications, including Web applications. There is an arbitrary login vulnerabilit...

D-link路由器/platform.cgi任意用户登陆漏洞

No description provided by source...

Important: php-ZendFramework

Issue Overview: The GenericConsumer class in the Consumer component in ZendOpenId before 2.0.2 and the ZendOpenIdConsumer class in Zend Framework 1 before 1.12.4 violate the OpenID 2.0 protocol by ensuring only that at least one field is signed, which allows remote attackers to bypass...

CVE-2012-0656

Race condition in LoginUIFramework in Apple Mac OS X 10.7.x before 10.7.4, when the Guest account is enabled, allows physically proximate attackers to login to arbitrary accounts by entering the account name and no password...