5703 matches found
Xin Online APP has logic design flaws
XIN ONLINE APP is a mobile home search software that integrates the functions of second-hand house, rental house and new house. Xin Online APP has a logical design vulnerability. Attackers can register any user and reset any password by grabbing packets to get the verification code through the...
Vivo Bike Share Android App Has Logic Design Flaws
Vivo Bike Share Android APP is a bike sharing rental software. There is a logic design vulnerability in Vivi Bike Sharing Android APP. Attackers can register any account by grabbing packets and blasting CAPTCHA...
PCG Travel Android App Has Logic Design Flaws
PCG Travel Android APP is a B2B2C travel service platform. PCG Travel Android APP has a logical design vulnerability. After registering, an attacker can reset any account password by grabbing packets to bypass the CAPTCHA through the forgot password function...
Beauty Assistant App Has Logic Design Flaws
Beauty Assistant APP is a retouching software. There is a logical design vulnerability in Beauty Assistant APP. Attackers can register any account by grabbing packets and blasting CAPTCHA...
Introducing pywintrace: A Python Wrapper for ETW
Introduction Event tracing for Windows ETW is a lightweight logging facility first introduced with Windows 2000. Originally intended as a software diagnostic, troubleshooting and performance monitoring tool, it was greatly expanded in Windows Vista to create a lightweight debugging mechanism. The...
Introducing pywintrace: A Python Wrapper for ETW
Introduction Event tracing for Windows ETW is a lightweight logging facility first introduced with Windows 2000. Originally intended as a software diagnostic, troubleshooting and performance monitoring tool, it was greatly expanded in Windows Vista to create a lightweight debugging mechanism. The...
Arbitrary Account Password Reset Vulnerability in Haiwell Cloud SCADA Android App
Haiwell Cloud SCADA is an industrial automation monitoring and management platform software based on .NET Framework developed by Xiamen Haiwell Technology Co. An arbitrary account password reset vulnerability exists in the Haiwell Cloud SCADA Android APP. An attacker can reset any account passwor...
Introducing pywintrace: A Python Wrapper for ETW
ARCHIVED STORY Introducing pywintrace: A Python Wrapper for ETW By Anthony Berglund, Kevin Boyd · September 19, 2017 Introduction Event tracing for Windows ETW is a lightweight logging facility first introduced with Windows 2000. Originally intended as a software diagnostic, troubleshooting and...
Tai Financial App has an arbitrary cell phone number registration loophole
Tai Financial App is an investment and financial management software. There is an arbitrary cell phone number registration vulnerability in Tai Wealth Management APP. Attackers can register any account and perform unauthorized operations by bypassing the authentication code through grabbing packe...
Worth Borrowing App Has Logic Design Flaws
Worth Borrowing App is a comprehensive lending platform with a huge selection of low-interest, low-threshold pure credit cash borrowing products. There is a logical design vulnerability in the Worth Borrowing App, which allows an attacker to log in to the system and perform unauthorized operation...
View App has a logic design flaw
Viewtec APP is an interactive mobile internet product with video as the main content carrier. There is a vulnerability in the logic design of Videotek APP, which allows an attacker to arbitrarily register users and change account passwords by grabbing packets...
Block Screen capture option in MDX policies for IOS devices
Question : Block Screen capture option is not available in SecureMail MDX policies for IOS devices. Answer : Block screen capture option is available only on Android and not on iOS. Any option which is not available under MDX policies is by default On. Hence the Screen capture/snapshots will be...
Logic design flaws in BMS CRM APP
CRM APP is a mobile sales customer management platform developed by Xiamen Ruipu Software Technology Co. CRM APP has a logical design loophole, the attacker forgets the password function to capture the packet to obtain the verification code, you can arbitrarily register users and reset any passwo...
Logic design flaws in the Ten Cent Share app
Dime Share app is a smart ad push platform that enables users to get cash rewards by clicking on business information posters. A logical design vulnerability exists in the Dime Share app. An attacker can reset and log into other users' systems by capturing authentication codes in a packet...
Aier Eye Group's Eye Neighborhood Doctor's Edition App for Android Has Logic Design Flaws
Eye Neighborhood Doctor Edition App is an application designed and developed for ophthalmologists and ophthalmology practitioners. The Android version of Eye Neighborhood Doctor Edition APP of Aier Ophthalmology Group has a logic design vulnerability, which allows attackers to successfully regist...
Logic design flaws in the Android version of Eye Neighborhood App of Aire Eye Group
Eye Neighborhood APP is an all-round eye health management application, which monitors your eye health anytime and anywhere, consults with professional ophthalmologists online, and connects with offline eye health medical products to provide users with professional checkups and treatment services...
Tcpdump PIM Parser Buffer Overflow Vulnerability
Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.PIM parser is one of the PIM multicast protocol parsers. A buffer...
Tcpdump PIMv2 Parser Buffer Overflow Vulnerability
Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.PIMv2 parser is one of the PIM multicast protocol parsers. A buffer...
Tcpdump PPP parser buffer overflow vulnerability (CNVD-2017-28271)
Tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.PPP parser is one of the peer-to-peer protocol parsers. A buffer...
