Aier Eye Group's Eye Neighborhood Doctor's Edition App for Android Has Logic Design Flaws

Eye Neighborhood Doctor Edition App is an application designed and developed for ophthalmologists and ophthalmology practitioners. The Android version of Eye Neighborhood Doctor Edition APP of Aier Ophthalmology Group has a logic design vulnerability, which allows attackers to successfully regist...

Logic design flaws in the Android version of Eye Neighborhood App of Aire Eye Group

Eye Neighborhood APP is an all-round eye health management application, which monitors your eye health anytime and anywhere, consults with professional ophthalmologists online, and connects with offline eye health medical products to provide users with professional checkups and treatment services...

Tcpdump PIMv2 Parser Buffer Overflow Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.PIMv2 parser is one of the PIM multicast protocol parsers. A buffer...

Tcpdump PIM Parser Buffer Overflow Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.PIM parser is one of the PIM multicast protocol parsers. A buffer...

Tcpdump PPP parser buffer overflow vulnerability (CNVD-2017-28271)

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.PPP parser is one of the peer-to-peer protocol parsers. A buffer...

DEBIAN-CVE-2017-14266

tcprewrite in Tcpreplay 3.4.4 has a Heap-Based Buffer Overflow vulnerability triggered by a crafted PCAP file, a related issue to CVE-2016-6160...

PT-2017-12869

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the LLDP parser, specifically in the lldp mgmt addr tlv print function within print-lldp.c. Recommendations For versions prior to 4.9.2, update to versio...

One One Travel App Has Logic Design Flaws

One Rent Car is a new energy car time-share rental APP developed by Beijing One Rent Technology Co. One One Travel APP has a logical design vulnerability, attackers can successfully log in by grabbing packets to obtain the verification code...

Logic design flaws in the Android version of the E-Care Online APP (Patient Side)

E-nursing online platform is a platform that provides professional nursing services for the majority of users through the development of an innovative health care service model by Shenyang Shengtai Internet Technology Co. There is a logical design vulnerability in the Android version of the...

Huicheng Gold app has logic design flaws

The Huicheng Gold app is an internet-based lending software. There is a logical design vulnerability in the Huicheng Gold Service app. Attackers can log into other users' systems, reset arbitrary passwords and perform unauthorized operations by capturing verification codes through packet grabbing...

Phoenix Gold app has logic design flaws

Phoenix Gold app is a financial information service platform created by Shenzhen Jinshi Internet Financial Service Co. Phoenix Gold Service app has a logical design vulnerability. Attackers can log in to other users' systems, reset arbitrary passwords and perform unauthorized operations by...

Chongqing Cable Networks Come to the Point app suffers from overstepping access vulnerability

Lai Dot app is an exclusive service for Chongqing Cable broadband subscribers to watch videos, just download and install the client on smart mobile terminals such as cell phones and flat-panel computers and then access Chongqing Cable WIFI network to enjoy the viewing experience. Chongqing Cable ...

Rice Gold app has logic design flaws

Paddy Gold app is a financial service platform created by Xiamen Golden Paddy Financial. A logical design vulnerability exists in the Paddy Gold app. Attackers can log in to other users' systems, reset arbitrary passwords and perform unauthorized operations by capturing authentication codes in a...

Only Circle app has a logic design flaw

The Only Circle app is a circle DIY platform with social features. There is a vulnerability in the logic design of the Only Circle app. An attacker can register any account, reset any password and perform unauthorized operations by capturing packets and blasting CAPTCHA...

People's Liberation Army Naval General Hospital Android app has password bypass vulnerability

The Naval General Hospital app is a handheld medical platform launched by the Naval General Hospital of the Chinese People's Liberation Army. A password bypass vulnerability exists in the People's Liberation Army Naval General Hospital Android App. An attacker can log into the VIP account and...

Override access vulnerability in the Academic Management System of the Gardener Teaching and Learning Management Platform

The Gardener Instructional Management Platform is a comprehensive school management platform that focuses on teaching as an integrated management program. There is an override access vulnerability in the academic management system of the Gardener Teaching Management Platform. After logging in to...

MacroAsia Financial App Has Logic Design Flaws

Hongya Finance is an internet financial information intermediary platform operated by Hangzhou Hongya Financial Information Service Co., Ltd, focusing on supply chain finance and asset package transfer business. There is a logical design loophole in the APP of Hongya Financial, and the attacker c...

Cloud Inspection App for Android has a logic flaw

Cloud Inspection is a scanning application authorized by the Entry-Exit Inspection and Quarantine Bureau, which allows you to find out the price, origin, date of entry, inspection and quarantine information of the goods. There is a logical loophole in the Android version of the Cloud Inspection...

Shenzhen Yuanzheng Technology golo Android APP has overstepped access vulnerability

golo APP is a social networking application that uses instant messaging as a communication platform to connect automotive repair technicians with car owners. Shenzhen Yuanzheng Technology's golo Android APP has an overstepping access vulnerability, which allows an attacker to view any registered...

Shandong government service app for Android has overstepping access vulnerability

Shandong government service APP is a government information software created by the Shandong Government Office. The software can release the latest information of Shandong government services in time, support personalized subscription, full-text search function, to provide faster service for the...