Xiaofeng Air Ching App for Android has an overstepping loophole

Ltd. developed with the work of the Xiao Feng Air Dorothy system APP, mainly used to monitor the indoor air quality and Xiao Feng Air Dorothy internal and external machine running status, monitoring items including PM2.5, formaldehyde, oxygen, temperature and humidity, and can be through the APP...

Wise Ride Android App Has Logic Design Flaws

Smart Ride Ride Le app is a smart city public bike rental app. There is a logic design loophole in the Zhixing Jiale Android app. After logging into the system, an attacker can modify the amount of payment arbitrarily by clicking on the "Alipay Payment Credit Deposit" option and intercepting it...

Logic Design Vulnerability in EasyCMS Frontend

EasyCMS is lightweight scalable open source content management program, following the Apache2 open source agreement. A logical design vulnerability exists in the frontend of EasyCMS. Attackers can log into the user center and modify other people's mailboxes and data by intercepting and modifying...

Shinex Mobile App Has Logic Design Flaws

Credit Ease Mobile App is a software that helps credit managers to work efficiently. There is a logical design vulnerability in Xinyik Mobile APP. An attacker can log into any account system by capturing packets and bursting the verification code...

Flower Han App Has Logic Design Flaws

Flower Han is a cosmetic surgery and beauty community app. There is a logical design vulnerability in the Flower Han app that allows an attacker to register any user and reset a user's password by grabbing packets and modifying a cell phone number...

Logic design flaws in Jia Yi Chong App

Jia Yi Charge App is a mobile application for city charging pile information inquiry and use. There is a logical design vulnerability in JiaYiCharge App, which allows an attacker to register any user and reset any user's password by grabbing packets and modifying the cell phone number...

Appointment app has logic design flaws

Covenant App is an application that offers to sell your time and skills to earn money. There is a logical design loophole in Dating App that allows attackers to register any user and reset user passwords by grabbing packets and modifying cell phone numbers...

Arbitrary User Registration and Password Reset Vulnerability in Sapless App

The Paceless App is a software that provides cloud-based intelligent menstrual cycle data recording and analysis. There is an arbitrary user registration vulnerability in Snappy Worry-Free App, which allows an attacker to register any user and reset the user's password by catching packets and...

There are logic design flaws in the Arisu App

Yushu App is a must-have tool for job-seeking created by Touyun Inside and Outside Beijing Network Technology Co. There is a logical design vulnerability in Yushu App, which allows attackers to register any user and reset any user's password by grabbing packets and modifying cell phone numbers...

Men's Health App Has Arbitrary User Login Vulnerability

Men's Health App is a men's health support tool app. There is an arbitrary user login vulnerability in Men's Health APP. Attackers can login to any account registration by grabbing packets to get the verification code...

Tongcun Village App suffers from arbitrary user login vulnerability

Tongcun Village App is a smart travel application for villagers. There is an arbitrary user login vulnerability in Tongcun Village APP. Attackers can log in to any user account by grabbing packets and bursting the verification code...

4S Circle App has arbitrary account registration vulnerability

4S Circle APP is a handheld tool that connects 4S stores and used car trading. 4S Circle APP has an arbitrary account registration vulnerability. Attackers can register any account by grabbing packets to get the verification code...

Fast Teeth App Has Logic Design Flaws

Fast Teeth APP is a cell phone transfer software. There is a logical design vulnerability in Fast Teeth APP. Attackers can register any account by grabbing packets and blasting the verification code...

Huishang Xingbang App Has Logic Design Flaws

Huishang Xingbang is a resource docking platform for SMEs jointly built by Changzhou Chamber of Commerce Comprehensive Service Center and Changzhou Huishang Xingbang Enterprise Service Co. There is a logical design vulnerability in Huishang Xingbang App, which allows an attacker to log in to any...

ExamCert App Has Logic Design Flaws

Examination treasure is by the Shanghai windmill education science and technology limited company launched all aspects of learning and practicing combination of mobile learning application software. There is a logical design vulnerability in ExamCert App that allows an attacker to reset any accou...

Smart Transit App Has Logic Design Flaws

Smart Bus App is a bus route search software. There is a logical design vulnerability in Smart Bus App, which allows an attacker to register any user and reset any user's password by grabbing packets...

Logic Design Vulnerability in TouTou Shared Bike Android APP (CNVD-2017-32466)

TouTou Shared Bike Android APP is a shared bike travel software for cities. There is a logical design vulnerability in TouTou Shared Bicycle Android APP. After registering and logging into the system, an attacker can arbitrarily modify the size of the payment amount by confirming the recharge...

Road to Health Android App Has Logic Design Flaws

Health Road APP is a medical service platform that provides users with services such as registration, consultation, physical examination and accompanying consultation. A logic design vulnerability exists in the Health Road Android APP. The vulnerability is due to the failure of the Alipay payment...

Logic design flaws in Panda TV APP Android version

Panda TV mobile video client is a mobile video online playback platform jointly created by Sichuan Golden Panda New Media Co. There is a logical design loophole in the Android version of Panda TV APP, which allows attackers to register an account arbitrarily by grabbing packets and modifying the...

Arbitrary Account Password Reset Vulnerability in Hongyi Environmental Protection Android APP

Hongyi Environmental Android APP is an air purifier management tool. There is an arbitrary account password reset vulnerability in Hongyi Environmental Protection Android APP. After logging into the system, an attacker can reset any password by grabbing packets and modifying them through the forg...