ShinePhone APP Has Multiple Override Access Vulnerabilities

ShinePhone APP is a PV plant monitoring client software. ShinePhone APP has a number of override access vulnerabilities. Attackers can use this vulnerability to view sensitive information such as the configuration of any user's power plant equipment...

Huawei VMall Override Vulnerability

Huawei VMall is Huawei's e-commerce platform for nationwide services. Huawei VMall suffers from an overstepping vulnerability, which can be exploited by local attackers who do not have access privileges to trick users into installing malicious mobile applications, sending outbound HTTP requests a...

UCMS has an override access vulnerability

UCMS is a simple open source content management system. UCMS version 1.4.3 suffers from an override access vulnerability, which can be exploited by an attacker to override the right to modify, add, or delete administrator users...

Override access vulnerability in the Academic Management System of the Gardener Teaching and Learning Management Platform

The Gardener Instructional Management Platform is a comprehensive school management platform that focuses on teaching as an integrated management program. There is an override access vulnerability in the academic management system of the Gardener Teaching Management Platform. After logging in to...

Memory Override Access Vulnerability in Xunlei Look Client

Xunlei Look client is Xunlei's video playback software. A memory override access vulnerability exists in the Xunlei Look client's decoder when decoding special mp4 files. An attacker could exploit this vulnerability to cause a denial of service...

Memory Override Vulnerability in Sohu Video 5

Sohu Video 5 is Sohu's video playback software for PC. A memory override vulnerability exists in Sohu Video 5's decoder when decoding special mp4 files. An attacker exploited the vulnerability to cause the software to crash, resulting in a denial of service...

Memory Override Access Vulnerability in QQ Music Client

QQ Music client is Tencent's music playback software. A memory override access vulnerability exists in the qmpmp3.dll module of the QQ Music client when parsing a specific mp3, which can be exploited by an attacker to cause a denial of service...

Microtransit EV Android App has an override access vulnerability

Microbus EV APP is a car time-share rental service software. Microtransit EV Android APP has an override access vulnerability. After logging into the system, an attacker can view any account information, including user's name, cell phone number, ID number, account amount and other sensitive...

E-Charge APP for Android suffers from an override access vulnerability

E-Charge APP is a car charging service application, providing users with convenient electric vehicle charging functions, so that users can automatically check the nearest charging piles through the navigation, fast charging, and experience a green traveling life. E-Charge APP Android version of t...

Kandi Car Share Android app has an override access vulnerability

Car Sharing app is a new energy car time-sharing platform. The Kandi Car Sharing Android app suffers from an override access vulnerability. An attacker using this vulnerability can view arbitrary account information and disclose the user's name, ID number, and cell phone number...

Override Access Vulnerability in MicrosRock v1.0

Microscale is a free and open source microsoft public number management system. An override access vulnerability exists in Weixin v1.0. The vulnerability is due to bootstrap.sys.inc.php failing to make strict judgments on permissions that allows a remote attacker to perform an override and gain...

Wheat Pro Android App suffers from an overstepping access vulnerability

Wheat Pro app is a mobile office software that integrates PV plant monitoring, work order processing, PV plant troubleshooting and other functions. Wheat Pro Android App has an override access vulnerability. Attackers can use the vulnerability to arbitrarily view the user's cell phone number,...

Wheat Home Edition Android App Has Override Access Vulnerability

Wheat Home Edition app is a video surveillance software that provides PV monitoring services. Wheat Home Edition Android App suffers from an override access vulnerability. Attackers can utilize the vulnerability to arbitrarily view sensitive information such as user's cell phone number, email...

Vulnerabilities in the Teaching Management System of Shenzhen Longchuang Software Co.

The Academic Affairs Management System AAMS is based on the campus network/Internet to provide advanced and practical information management means for school teaching operation, and to provide students, teachers, teaching assistants and management personnel with simple and fast networked...

360 Compressor has an override access vulnerability

360 Compress is a free decompression software from 360. An over-the-horizon access vulnerability exists in 360 Zip. The vulnerability is due to 360zipc.dll writing data to a NULL address, allowing an attacker to exploit the vulnerability to execute code...

IBM InfoSphere Master Data Management Security Bypass Vulnerability (CNVD-2017-21237)

IBM InfoSphere Master Data Management MDM is an IBM USA solution for helping organizations manage enterprise-wide master data information about customers, suppliers, products, and accounts. The solution supports the centralization of multiple data domains through three master data usage styles:...

Guizhou Provincial People's Hospital's Android App Has Override Access Vulnerability

Guizhou Provincial People's Hospital APP is a medical app for local people in Guizhou, making it easier and faster for people to see a doctor. Download Guizhou Provincial People's Hospital APP to utilize ID cards, visiting cards and other identification to get all the information about the visit,...

Design/Logic Flaw

HTTP Parameter Override is identified in the IBM Infosphere Master Data Management MDM 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 product. It enables attackers by exposing the presence of duplicated parameters which may produce an anomalous behavior in the application that can be potentially exploite...

CVE-2016-9717

HTTP Parameter Override is identified in the IBM Infosphere Master Data Management MDM 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 product. It enables attackers by exposing the presence of duplicated parameters which may produce an anomalous behavior in the application that can be potentially exploite...

CVE-2016-9717

HTTP Parameter Override is identified in the IBM Infosphere Master Data Management MDM 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 product. It enables attackers by exposing the presence of duplicated parameters which may produce an anomalous behavior in the application that can be potentially exploite...