70 matches found
Arbitrary User Registration and Password Reset Vulnerability in Sapless App
The Paceless App is a software that provides cloud-based intelligent menstrual cycle data recording and analysis. There is an arbitrary user registration vulnerability in Snappy Worry-Free App, which allows an attacker to register any user and reset the user's password by catching packets and...
There are logic design flaws in the Arisu App
Yushu App is a must-have tool for job-seeking created by Touyun Inside and Outside Beijing Network Technology Co. There is a logical design vulnerability in Yushu App, which allows attackers to register any user and reset any user's password by grabbing packets and modifying cell phone numbers...
Tongcun Village App suffers from arbitrary user login vulnerability
Tongcun Village App is a smart travel application for villagers. There is an arbitrary user login vulnerability in Tongcun Village APP. Attackers can log in to any user account by grabbing packets and bursting the verification code...
Men's Health App Has Arbitrary User Login Vulnerability
Men's Health App is a men's health support tool app. There is an arbitrary user login vulnerability in Men's Health APP. Attackers can login to any account registration by grabbing packets to get the verification code...
4S Circle App has arbitrary account registration vulnerability
4S Circle APP is a handheld tool that connects 4S stores and used car trading. 4S Circle APP has an arbitrary account registration vulnerability. Attackers can register any account by grabbing packets to get the verification code...
Fast Teeth App Has Logic Design Flaws
Fast Teeth APP is a cell phone transfer software. There is a logical design vulnerability in Fast Teeth APP. Attackers can register any account by grabbing packets and blasting the verification code...
Huishang Xingbang App Has Logic Design Flaws
Huishang Xingbang is a resource docking platform for SMEs jointly built by Changzhou Chamber of Commerce Comprehensive Service Center and Changzhou Huishang Xingbang Enterprise Service Co. There is a logical design vulnerability in Huishang Xingbang App, which allows an attacker to log in to any...
ExamCert App Has Logic Design Flaws
Examination treasure is by the Shanghai windmill education science and technology limited company launched all aspects of learning and practicing combination of mobile learning application software. There is a logical design vulnerability in ExamCert App that allows an attacker to reset any accou...
Smart Transit App Has Logic Design Flaws
Smart Bus App is a bus route search software. There is a logical design vulnerability in Smart Bus App, which allows an attacker to register any user and reset any user's password by grabbing packets...
Logic Design Vulnerability in TouTou Shared Bike Android APP (CNVD-2017-32466)
TouTou Shared Bike Android APP is a shared bike travel software for cities. There is a logical design vulnerability in TouTou Shared Bicycle Android APP. After registering and logging into the system, an attacker can arbitrarily modify the size of the payment amount by confirming the recharge...
Road to Health Android App Has Logic Design Flaws
Health Road APP is a medical service platform that provides users with services such as registration, consultation, physical examination and accompanying consultation. A logic design vulnerability exists in the Health Road Android APP. The vulnerability is due to the failure of the Alipay payment...
Logic design flaws in Panda TV APP Android version
Panda TV mobile video client is a mobile video online playback platform jointly created by Sichuan Golden Panda New Media Co. There is a logical design loophole in the Android version of Panda TV APP, which allows attackers to register an account arbitrarily by grabbing packets and modifying the...
Arbitrary Account Password Reset Vulnerability in Hongyi Environmental Protection Android APP
Hongyi Environmental Android APP is an air purifier management tool. There is an arbitrary account password reset vulnerability in Hongyi Environmental Protection Android APP. After logging into the system, an attacker can reset any password by grabbing packets and modifying them through the forg...
Password Bypass Vulnerability in Haiwell Cloud SCADA Android App
Haiwell Cloud SCADA is an industrial automation monitoring and management platform software based on .NET Framework developed by Xiamen Haiwell Technology Co. A password bypass vulnerability exists in the Haiwell Cloud SCADA Android APP. An attacker can bind any other cell phone by intercepting t...
The Little Companion App has a logic design flaw
Little Companion APP is a mobile internet information platform specialized in picking up and dropping off children. There is a logical design vulnerability in Little Companion APP, after the attacker registers, the attacker can arbitrarily register users and arbitrarily reset passwords through th...
Sharing Premium App Has Logic Design Flaws
Shared Premium APP is a mobile software that focuses on saving money on online shopping. Sharing Premium APP has a logical design loophole, the attacker can arbitrarily register users and arbitrarily reset passwords by grabbing packets and bursting verification codes...
Aier Eye Group's Eye Neighborhood Doctor's Edition App for Android Has Logic Design Flaws
Eye Neighborhood Doctor Edition App is an application designed and developed for ophthalmologists and ophthalmology practitioners. The Android version of Eye Neighborhood Doctor Edition APP of Aier Ophthalmology Group has a logical design vulnerability, which allows an attacker to reset any accou...
Rent 8 Rings APP suffers from Arbitrary Explosion and Arbitrary Login Vulnerability
Rent 8 Rings APP is a cell phone software for online electric car sharing and renting by Jiangsu Rent 8 Rings Intelligent Technology Cable Company. Rent 8 Rings APP exists arbitrary blasting arbitrary login vulnerability. Attackers can log in to the task account by grabbing packets and blasting t...
Logic design flaws in the Android version of Eye Neighborhood App of Aier Eye Group
Eye Neighborhood APP is an all-round eye health management application, which monitors your eye health anytime and anywhere, consults with professional ophthalmologists online, and connects with offline eye health medical products to provide users with professional checkups and treatment services...
EZZY APP Android version of the deposit function module has a payment design loophole
EZZY APP is a car intelligent sharing platform APP created by Beijing Daimeng Technology Co. The Android version of EZZY APP has a vulnerability in the amount payment design. After logging into the system, an attacker can arbitrarily modify the size of the payment amount by clicking on the paymen...