486 matches found
Logic design loopholes in Wuhan Xinhongbo practice teaching management platform
Practice Teaching Management Platform is a comprehensive management platform integrating many functions such as resource construction, teaching practice, top practice, graduation design and experimental teaching counseling. Wuhan Xinhongbo Practice Teaching Management Platform has a logical desig...
Two Sides App has an override access vulnerability
Two Sides APP is an emotional, psychological and fun social software launched by Beijing Two Sides Network Technology Co. Two Sides APP 3.0.28 Android version has an override access vulnerability, after logging in to the system, an attacker can log in to other users' systems and perform...
Hefei Yingyun Information Technology Co., Ltd. ordering good APP there is a verification code leakage vulnerability
OrderGood APP is an omni-channel order platform, distribution platform APP. There is a verification code leakage vulnerability in the Ordering Good APP of Hefei Yingyun Information Technology Co. Attackers can log into other user accounts by grabbing packets to get the verification code...
Shanghai Lehigh Network Technology Co., Ltd. bug house APP has multiple vulnerabilities
Bug House App is a home service software. Shanghai Lehigh Network Technology Co., Ltd Bug House APP exists arbitrary user registration and arbitrary user password reset vulnerability. Attackers can register any account and reset any password by grabbing packets and blasting the verification code...
MIMI APP of Shenzhen Xinyi Network Co., Ltd. suffers from arbitrary number registration vulnerability
MIMI APP is an app that focuses on voice socialization. There is an arbitrary number registration vulnerability in MIMI APP of Shenzhen Xinyi Network Co. Attackers can register any account by grabbing packets and blasting the verification code...
Palo Alto Networks PAN-OS 8.0.x < 8.0.6-h3 Web Interface Packet Capture Management Unspecified Remote Command Injection
The version of Palo Alto Networks PAN-OS running on the remote host is 8.0.x prior to 8.0.6-h3. It is, therefore, affected by an unspecified flaw in the web interface packet capture management that allows an authenticated user to inject arbitrary commands. C Tenable Network Security, Inc...
Code injection
The web interface packet capture management component in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote authenticated users to execute arbitrary code via unspecified vectors...
CVE-2017-15940
The web interface packet capture management component in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote authenticated users to execute arbitrary code via unspecified vectors...
CVE-2017-15940
The web interface packet capture management component in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote authenticated users to execute arbitrary code via unspecified vectors...
CVE-2017-15940
The CVE-2017-15940 issue affects PAN-OS web interface packet capture management across multiple releases: 6.1.x < 6.1.19, 7.0.x < 7.0.19, 7.1.x < 7.1.14, and 8.0.x
HOT Man Android App Has Information Leakage Vulnerability
HOT Man Android APP is a mobile magazine software. There is an information leakage vulnerability in HOT Man Android APP. After registering and logging in to the system, an attacker can obtain sensitive information such as other users' UIDs, names, and cell phone numbers by clicking on "My Avatar"...
Palo Alto Networks PAN-OS Remote Command Injection Vulnerability
Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall devices. web interface packet capture management component is one of the web interface packet capture management components. A remote command injection vulnerability exists in the web interface packe...
Wise Heat Temperature Control App for Android has an arbitrary account password reset vulnerability
Smart Heat Temperature Control APP a home temperature control software, users only need to add the home's Internet-accessible thermostat to the software, you can use your phone or tablet to control the temperature of your home's HVAC equipment. The Android version of Smart Heat Temperature Contro...
Out-of-authority access vulnerability in Butler Smart App for Android
The Butler Smart App is a mobile application that goes along with the smart cat eye device. The Android version of Butler Smart APP suffers from an overstepping access vulnerability, which allows an attacker to log in to other users' systems and perform unauthorized operations by grabbing packets...
Rimet Wifi Smart Temperature Control Android APP has an override access vulnerability
Rimet Wifi Smart Temperature Control Android APP is a management platform for smart hardware devices. Rimet Wifi Intelligent Temperature Control Android APP has an override access vulnerability. After logging into the client, the attacker can obtain sensitive information such as patient's name,...
Top Smart Android APP has logic design flaws
Top Smart Android APP is a marketing management software for the majority of users. The software can help users keep abreast of information developments and activities in the smart home industry. There is a logic design vulnerability in Top Smart Android APP. Attackers can log in to any account b...
How to Run Packet Capture on NetScaler SD-WAN WANOP
This article describes how to run packet capture on NetScaler SD-WAN WANOP...
Logic design flaws in FeeControl Mobile App
FeeControl Mobile App is a mobile bookkeeping office software. There is a logical design vulnerability in FeeControl Mobile APP. An attacker can log into any account by grabbing packets and blasting the verification code...
Malicious Bulk Registration Vulnerability in Bodivis Android APP of Tongfang Co.
The bodivis Android App is a healthy life management app for use with the bodivis Health Scale and Exercise Bracelet. There is a malicious bulk registration vulnerability in the bodivis Android APP of Tongfang Co. Attackers can bypass the authentication code and register accounts in bulk by...
Libpcap Design Vulnerabilities
libpcap is a C library for network packet capture. A security vulnerability exists in the pcap-linux.c file in version 1.1.1 prior to libpcap commit ea9432fabdf4b33cbc76d9437200e028f1c47c93. A remote attacker can exploit this vulnerability to send arbitrary data with the help of specially crafted...