Microticket Mobile App Has Logic Design Flaws

Microticket Mobile App is an e-ticketing App developed by the R&D team of Beijing Microticket E-commerce Co. There is a logic design vulnerability in Microticket Mobile App. Attackers can utilize this vulnerability to replay the packets of sending CAPTCHA without restriction and bombard the clien...

WordPress mobile-app-builder-by-wappress arbitrary file upload vulnerability

WordPress mobile-app-builder-by-wappress is a mobile app development plugin for WordPress. An arbitrary file upload vulnerability exists in WordPress mobile-app-builder-by-wappress version 1.05, which originates from . The vulnerability stems from code in the...

Forbidden Horse Travel App has a logic design flaw

The Forbidden Horse Mobility App is a cell phone application for sharing motorcycles. There is a logic design loophole in Foramar Mobility APP, which allows attackers to arbitrarily register users or steal other users' account information for picking up a bike by grabbing packets and bursting...

Palm North App has multiple vulnerabilities

Palm Shang Beiguo APP is a comprehensive mobile media platform created by Shijiazhuang Beiren Group, which integrates online shopping, member services, e-membership, member e-wallet, integral activities, coupon issuance, parking, navigation, scheduling, seat selection and other services. There ar...

Design/Logic Flaw

Vulnerability in wordpress plugin mobile-app-builder-by-wappress v1.05, The plugin includes unlicensed vulnerable CMS software from http://www.invedion.com...

CVE-2017-1002001

Vulnerability in wordpress plugin mobile-app-builder-by-wappress v1.05, The plugin includes unlicensed vulnerable CMS software from http://www.invedion.com...

CVE-2017-1002001

The CVE-2017-1002001 issue affects the WordPress plugin “mobile-app-builder-by-wappress” v1.05. CNVD/NVD detail an arbitrary file upload vulnerability stemming from the plugin’s server/images.php path, where authentication/permissions checks are not performed, enabling an attacker to upload arbit...

CVE-2017-1002001

Vulnerability in wordpress plugin mobile-app-builder-by-wappress v1.05, The plugin includes unlicensed vulnerable CMS software from http://www.invedion.com...

An Established Solution for Mobile Threats

As much as smartphones and applications have evolved over the years, so has mobile malware. We’re seeing an increasing number of threats—from mobile ransomware and auto-clicking adware to dangerous backdoors that can compromise your privacy. And there are also legitimate personal applications tha...

Information leakage vulnerability in Aliyun OSS credentials for Advanced Medical Examination BaoDian

Advanced Medical Exam App is a physician exam material application exam study question bank app. There is an information leakage vulnerability in the Medical Advanced Title Exam BaoDian AliCloud OSS credentials. The vulnerability is caused by credential leakage due to the use of SDK with...

The vulnerability of the mobile application MSM for the Android operating system allows a hacker to trigger a device restart.

The vulnerability of the MSM mobile application for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to trigger a device reboot after a kernel failure. This occurs because when the object associated with the codec is...

Cloud tip high school entrance examination Ali cloud OSS credentials have information leakage vulnerability

Cloudtip Higher Education App is a study software for high school students. There is an information leakage vulnerability in the Aliyun OSS credentials of CloudTip Higher Education. The vulnerability is caused by credential leakage due to the use of SDK with accessKeyId and accessKeySecret,...

This App Lets Anyone with Limited Skills Create Android Ransomware

By Uzair Amir We now have a Mobile App that Helps Cybercriminals Develop This is a post from HackRead.com Read the original post: This App Lets Anyone with Limited Skills Create Android Ransomware...

Lychee Live AliCloud OSS credentials have information leakage vulnerability

Lychee Live app is an Internet-based interactive live broadcasting platform launched by Guangdong Network Radio and Television. There is an information leakage vulnerability in Lychee Live Aliyun OSS credentials. The vulnerability is caused by credential leakage due to the use of SDK with...

Orange Aliyun OSS credentials suffer from information leakage vulnerability

Orange APP is an erotic community app. AliCloud Object Storage ServiceObject Storage Service, or OSS for short, is a massive, secure and highly reliable cloud storage service provided by AliCloud to the public. There is an information leakage vulnerability in the Orange Aliyun OSS credentials. Th...

Personality.com App AliCloud OSS Credentials Exist Information Leakage Vulnerability

Personality.com App is a mobile application tailored for young people. Personality.com App AliCloud OSS credentials have information leakage vulnerability. The vulnerability is caused by credential leakage due to the built-in accessKeyId and accessKeySecret in the mobile app when using the SDK. A...

Information leakage vulnerability in Aliyun OSS credentials in Higher Education State

CollegeBang is dedicated to providing online courses, and course production services for colleges and universities around the world. Aliyun Object Storage Service, or OSS for short, is a massive, secure and highly reliable cloud storage service provided by Aliyun. There is an information leakage...

Amusing phone call AliCloud OSS credentials have information leakage vulnerability

Amusing Phone is a communication APP that combines entertainment and security, developed and launched by Beijing Shusheng Mobile Technology Co. There is an information leakage vulnerability in the AliCloud OSS credentials of Tease Phone. The vulnerability is caused by credential leakage due to th...

Yeah Classroom AliCloud OSS credentials have an information leakage vulnerability

Yeah Classroom is an online interactive learning and communication platform that focuses on vocational skills education. There is an information leakage vulnerability in the AliCloud OSS credentials of Yeah Classroom. The vulnerability is caused by credential leakage due to the use of SDK with...

Ate little brother ali cloud oss credentials have information leakage vulnerability

The Aite Little Brother app is a service program. There is an information leakage vulnerability in the Aite Little Brother AliCloud oss credentials. The vulnerability stems from the accessKeyId and accessKeySecret, endpoint built into the mobile app, resulting in credential leakage. An attacker c...