Any Account Registration and Any Password Reset Vulnerabilities Exist in Anxiety Companion App

Anxious companion APP is a companion O2O service platform. There are arbitrary account registration and arbitrary password reset vulnerabilities in Anxin escort APP. Attackers can register any account and reset any password by capturing the verification code...

The Little Companion App has a logic design flaw

Little Companion APP is a mobile internet information platform specialized in picking up and dropping off children. There is a logical design vulnerability in Little Companion APP, after the attacker registers, the attacker can arbitrarily register users and arbitrarily reset passwords through th...

WordPress Companion Auto Update plugin <=2.9.3 - Cross-Site Request Forgery (CSRF) and Cross-Site Scripting (XSS) Vulnerabilities

WordPress Companion Auto Update plugin Cross-Site Request Forgery CSRF and Cross-Site Scripting XSS vulnerability. The CSRF occurs when you try to change the plugin’s settings. There's no nonce to validate the request. The XSS vulnerability appears for "Email address" input field, the output is n...

Companion - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Companion published at the 'play' market has multiple vulnerabilities...

WoW Legion Companion - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application WoW Legion Companion published at the 'play' market has multiple vulnerabilities...

companionanimalhospitalnh.vetstreet.com XSS vulnerability

Vulnerable URL: http://companionanimalhospitalnh.vetstreet.com/careguide.html?filter=xss%3Cimg%20src=x%20onerror=confirm%22OPENBUGBOUNTY%22%3E=xss%3Cimg%20src=x%20onerror=confirm%22OPENBUGBOUNTY%22%3E& Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017...

SW Battlefront Companion - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application SW Battlefront Companion published at the 'play' market has multiple vulnerabilities...

Assassin’s Creed® IV Companion - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Assassin’s Creed® IV Companion published at the 'play' market has multiple vulnerabilities...

Flight Companion - Free - ContentProvider mode not defined, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Flight Companion - Free published at the 'play' market has multiple vulnerabilities...

VRN Companion - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application VRN Companion published at the 'play' market has multiple vulnerabilities...

RNN Companion - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application RNN Companion published at the 'play' market has multiple vulnerabilities...

FUT 15 Ultimate Team Companion - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application FUT 15 Ultimate Team Companion published at the 'play' market has multiple vulnerabilities...

ESPN Companion for Gear - External URLs, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application ESPN Companion for Gear published at the 'play' market has multiple vulnerabilities...

MIT AI2 Companion - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MIT AI2 Companion published at the 'play' market has multiple vulnerabilities...

Calibre Companion Demo Version - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Calibre Companion Demo Version published at the 'play' market has multiple vulnerabilities...

NBA LIVE Companion - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application NBA LIVE Companion published at the 'play' market has multiple vulnerabilities...

Home Companion for Wear - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Home Companion for Wear published at the 'play' market has multiple vulnerabilities...

IBM Notes Traveler Companion application information disclosure vulnerability

IBM Notes Traveler is an email product powerfully built for Lotus Notes mobile users. An information disclosure vulnerability exists in the IBM Notes Traveler Companion application, which allows attackers to exploit this vulnerability by conducting phishing attacks involving encrypted email to...

CVE-2014-8921

The IBM Notes Traveler Companion application 1.0 and 1.1 before 201411010515 for Window Phone, as distributed in IBM Notes Traveler 9.0.1, does not properly restrict the number of executions of the automatic configuration option, which makes it easier for remote attackers to capture credentials b...

CVE-2014-8921

The vulnerability CVE-2014-8921 affects the IBM Notes Traveler Companion for Windows Phone (versions 1.0 and 1.1 prior to 201411010515, as distributed in IBM Notes Traveler 9.0.1). The issue is an improper restriction on the number of executions of the automatic configuration option, which could ...