483 matches found
The Little Lord App has a logical design flaw
Little Lord App is a software focused on women's great aunt menstrual period management. There are vulnerabilities in the logic design of Little Master App that allow an attacker to register any user and reset any user's password by grabbing packets...
Worry-Free Waterkeeper App Has Logic Design Flaws
Worry-free Water Manager App is a real-time query for enterprises to provide sewage treatment system data, operational status visualization management software. Worry-Free Water Manager App has a logical design loophole that allows an attacker to log in to any user account by grabbing packets...
Yikang to Home Android APP has arbitrary cell phone number login vulnerability
Yikang to Home Android APP is mobile online pharmacy shopping software. There is an arbitrary cell phone number login vulnerability in Yikang to Home Android APP. An attacker can log in to any account by capturing a packet and obtaining a verification code...
Arbitrary User Registration Vulnerability in Healthcare Hospital App
Jianqi Hospital APP is a health service APP which integrates various forms of services such as "Ask Doctor + Self-diagnosis + Online Drug Purchase" and so on. There is an arbitrary user registration vulnerability in Jianke Hospital APP. Attackers can register any account by capturing packets and...
Dictionary of Medicine App is vulnerable to arbitrary account registration
Pharmaceutical Dictionary APP is a Chinese-English translation dictionary software for medical, pharmaceutical and other professionals under Medical Pulse. There is a logical design vulnerability in Dictionary of Medicine APP. An attacker can register any account by grabbing packets to get the...
Multiple Vulnerabilities in Photo Composer App
Picture Synthesizer APP is a picture synthesizer mobile software. Picture Synthesizer APP has arbitrary account registration and arbitrary password reset vulnerabilities. An attacker can register any account and reset any password by grabbing packets to get the verification code...
Arbitrary Account Registration and Password Reset Vulnerabilities in Tea Merchant APP
Tea Merchant APP is a software specialized in serving tea merchants. Tea Merchant APP has arbitrary account registration and password reset vulnerabilities. Attackers can register any account and reset any password by capturing packets and bursting the verification code...
Best Clinical Practice App Has Arbitrary Registration Account and Arbitrary Password Reset Vulnerabilities
The Best Clinical Practice App is an application designed to provide medical practitioners with knowledge of diagnosis and treatment during clinical practice and learning. The Best Clinical Practice APP is vulnerable to arbitrary account registration and arbitrary password reset. An attacker can...
Dual Opening Assistant App has a logical design flaw
Double Open Assistant APP is a game assistance application. There is a logical design vulnerability in Dual Open Assistant APP. Attackers can arbitrarily register users and reset arbitrary passwords by capturing packets to obtain verification codes...
TCP Stream Replay Tool: TCPCopy
Although the real live flow is important for the test of Internet server applications, it is hard to simulate it as online environments are too complex. To support more realistic testing of Internet server applications, we develop a live flow reproduction tool – TCPCopy, which could generate the...
Arbitrary Account Password Reset Vulnerability in the Android Version of China Machine Car APP
CAMC APP is an electric vehicle time-share rental program carried out by Beijing CAMC New Energy Vehicle Leasing Co. There is an arbitrary account password reset vulnerability in the Android version of CAMC APP. Attackers can reset the account password by grabbing packets, resulting in account...
Arbitrary Password Reset Vulnerability in Timeshow App
Times Show App is a software that integrates many functions such as topics, beautiful pictures, hot shows, friends, stickers, points, exchange goods and so on. The vulnerability is caused by a password reset vulnerability, which allows an attacker to register any user and reset any password by...
Arbitrary Password Reset Vulnerability in Xikai Gold Service App
Xikai Gold App is a professional investment and financial management software. Xikai Gold App has any password reset vulnerability, attackers can successfully register any account and reset any account password by grabbing packets...
Microbus App for Android suffers from an override access vulnerability
Microbus is a mobile application that integrates the functions of bus inquiry, mobile payment for tickets, bus parking site navigation, and real-time bus operation information view. The Android version of the Microbus app has an overstepping access vulnerability that allows an attacker to log in ...
The Ten Billion Dollar Alliance App Has a Logic Design Flaw
Ten Billion Affiliate App is a service platform that gives users rebate offers. Tianyi Union App has a logical design vulnerability, attackers can register any account and reset any account password by grabbing packets...
Windows Packet Divert: WinDivert
Windows Packet Divert WinDivert is a user-mode packet capture-and-divert package for Windows Vista, Windows 2008, Windows 7, Windows 8 and Windows 10. WinDivert allows usermode programs to capture/modify/drop network packets sent to/from the Windows network stack. In summary, WinDivert can captur...
Transit line app has logic design flaws
Bus Line App is a mobile bus software that allows you to check real-time arrival information of city buses and check bus routes. There is a logical design vulnerability in Bus Line App, which allows attackers to register users and reset their passwords arbitrarily by grabbing packets...
Public Transportation eTraffic App Has Logic Design Flaws
Bus eLutong is a free smartphone-based real-time bus information query software officially released by Beijing Public Transportation Group. There is a logical design vulnerability in Bus eLutong App, which allows an attacker to arbitrarily register a user and reset any user's password by grabbing...
Xin Online APP has logic design flaws
XIN ONLINE APP is a mobile home search software that integrates the functions of second-hand house, rental house and new house. Xin Online APP has a logical design vulnerability. Attackers can register any user and reset any password by grabbing packets to get the verification code through the...
Vivo Bike Share Android App Has Logic Design Flaws
Vivo Bike Share Android APP is a bike sharing rental software. There is a logic design vulnerability in Vivi Bike Sharing Android APP. Attackers can register any account by grabbing packets and blasting CAPTCHA...