Lucene search
+L

483 matches found

CNVD
CNVD
added 2017/10/16 12:0 a.m.2 views

The Little Lord App has a logical design flaw

Little Lord App is a software focused on women's great aunt menstrual period management. There are vulnerabilities in the logic design of Little Master App that allow an attacker to register any user and reset any user's password by grabbing packets...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2017/10/12 12:0 a.m.4 views

Worry-Free Waterkeeper App Has Logic Design Flaws

Worry-free Water Manager App is a real-time query for enterprises to provide sewage treatment system data, operational status visualization management software. Worry-Free Water Manager App has a logical design loophole that allows an attacker to log in to any user account by grabbing packets...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2017/10/10 12:0 a.m.4 views

Yikang to Home Android APP has arbitrary cell phone number login vulnerability

Yikang to Home Android APP is mobile online pharmacy shopping software. There is an arbitrary cell phone number login vulnerability in Yikang to Home Android APP. An attacker can log in to any account by capturing a packet and obtaining a verification code...

7AI score
SaveExploits0
CNVD
CNVD
added 2017/10/08 12:0 a.m.4 views

Arbitrary User Registration Vulnerability in Healthcare Hospital App

Jianqi Hospital APP is a health service APP which integrates various forms of services such as "Ask Doctor + Self-diagnosis + Online Drug Purchase" and so on. There is an arbitrary user registration vulnerability in Jianke Hospital APP. Attackers can register any account by capturing packets and...

7AI score
SaveExploits0
CNVD
CNVD
added 2017/10/08 12:0 a.m.4 views

Dictionary of Medicine App is vulnerable to arbitrary account registration

Pharmaceutical Dictionary APP is a Chinese-English translation dictionary software for medical, pharmaceutical and other professionals under Medical Pulse. There is a logical design vulnerability in Dictionary of Medicine APP. An attacker can register any account by grabbing packets to get the...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2017/10/08 12:0 a.m.6 views

Multiple Vulnerabilities in Photo Composer App

Picture Synthesizer APP is a picture synthesizer mobile software. Picture Synthesizer APP has arbitrary account registration and arbitrary password reset vulnerabilities. An attacker can register any account and reset any password by grabbing packets to get the verification code...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2017/10/08 12:0 a.m.5 views

Arbitrary Account Registration and Password Reset Vulnerabilities in Tea Merchant APP

Tea Merchant APP is a software specialized in serving tea merchants. Tea Merchant APP has arbitrary account registration and password reset vulnerabilities. Attackers can register any account and reset any password by capturing packets and bursting the verification code...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2017/10/08 12:0 a.m.7 views

Best Clinical Practice App Has Arbitrary Registration Account and Arbitrary Password Reset Vulnerabilities

The Best Clinical Practice App is an application designed to provide medical practitioners with knowledge of diagnosis and treatment during clinical practice and learning. The Best Clinical Practice APP is vulnerable to arbitrary account registration and arbitrary password reset. An attacker can...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2017/10/07 12:0 a.m.6 views

Dual Opening Assistant App has a logical design flaw

Double Open Assistant APP is a game assistance application. There is a logical design vulnerability in Dual Open Assistant APP. Attackers can arbitrarily register users and reset arbitrary passwords by capturing packets to obtain verification codes...

7AI score
SaveExploits0
n0where
n0where
added 2017/09/29 5:58 a.m.22 views

TCP Stream Replay Tool: TCPCopy

Although the real live flow is important for the test of Internet server applications, it is hard to simulate it as online environments are too complex. To support more realistic testing of Internet server applications, we develop a live flow reproduction tool – TCPCopy, which could generate the...

7.6AI score
SaveExploits0References2
CNVD
CNVD
added 2017/09/28 12:0 a.m.2 views

Arbitrary Account Password Reset Vulnerability in the Android Version of China Machine Car APP

CAMC APP is an electric vehicle time-share rental program carried out by Beijing CAMC New Energy Vehicle Leasing Co. There is an arbitrary account password reset vulnerability in the Android version of CAMC APP. Attackers can reset the account password by grabbing packets, resulting in account...

7AI score
SaveExploits0
CNVD
CNVD
added 2017/09/27 12:0 a.m.4 views

Arbitrary Password Reset Vulnerability in Timeshow App

Times Show App is a software that integrates many functions such as topics, beautiful pictures, hot shows, friends, stickers, points, exchange goods and so on. The vulnerability is caused by a password reset vulnerability, which allows an attacker to register any user and reset any password by...

7AI score
SaveExploits0
CNVD
CNVD
added 2017/09/27 12:0 a.m.3 views

Arbitrary Password Reset Vulnerability in Xikai Gold Service App

Xikai Gold App is a professional investment and financial management software. Xikai Gold App has any password reset vulnerability, attackers can successfully register any account and reset any account password by grabbing packets...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2017/09/27 12:0 a.m.6 views

Microbus App for Android suffers from an override access vulnerability

Microbus is a mobile application that integrates the functions of bus inquiry, mobile payment for tickets, bus parking site navigation, and real-time bus operation information view. The Android version of the Microbus app has an overstepping access vulnerability that allows an attacker to log in ...

6.5AI score
SaveExploits0
CNVD
CNVD
added 2017/09/27 12:0 a.m.3 views

The Ten Billion Dollar Alliance App Has a Logic Design Flaw

Ten Billion Affiliate App is a service platform that gives users rebate offers. Tianyi Union App has a logical design vulnerability, attackers can register any account and reset any account password by grabbing packets...

7.1AI score
SaveExploits0
n0where
n0where
added 2017/09/26 3:54 a.m.145 views

Windows Packet Divert: WinDivert

Windows Packet Divert WinDivert is a user-mode packet capture-and-divert package for Windows Vista, Windows 2008, Windows 7, Windows 8 and Windows 10. WinDivert allows usermode programs to capture/modify/drop network packets sent to/from the Windows network stack. In summary, WinDivert can captur...

1.2AI score
SaveExploits0References1
CNVD
CNVD
added 2017/09/26 12:0 a.m.3 views

Transit line app has logic design flaws

Bus Line App is a mobile bus software that allows you to check real-time arrival information of city buses and check bus routes. There is a logical design vulnerability in Bus Line App, which allows attackers to register users and reset their passwords arbitrarily by grabbing packets...

6.7AI score
SaveExploits0
CNVD
CNVD
added 2017/09/26 12:0 a.m.4 views

Public Transportation eTraffic App Has Logic Design Flaws

Bus eLutong is a free smartphone-based real-time bus information query software officially released by Beijing Public Transportation Group. There is a logical design vulnerability in Bus eLutong App, which allows an attacker to arbitrarily register a user and reset any user's password by grabbing...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2017/09/25 12:0 a.m.3 views

Xin Online APP has logic design flaws

XIN ONLINE APP is a mobile home search software that integrates the functions of second-hand house, rental house and new house. Xin Online APP has a logical design vulnerability. Attackers can register any user and reset any password by grabbing packets to get the verification code through the...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2017/09/25 12:0 a.m.5 views

Vivo Bike Share Android App Has Logic Design Flaws

Vivo Bike Share Android APP is a bike sharing rental software. There is a logic design vulnerability in Vivi Bike Sharing Android APP. Attackers can register any account by grabbing packets and blasting CAPTCHA...

6.9AI score
SaveExploits0
Rows per page
Query Builder