Arbitrary User Registration and Password Reset Vulnerability in Sapless App

The Paceless App is a software that provides cloud-based intelligent menstrual cycle data recording and analysis. There is an arbitrary user registration vulnerability in Snappy Worry-Free App, which allows an attacker to register any user and reset the user's password by catching packets and...

Carve Show English App Has a Logic Design Trap Vulnerability

Carve Show English App is a foreign language learning software. There is a vulnerability in the logical design of the app that allows an attacker to register any user and reset the user's password by modifying the cell phone number...

Comments Off on Arbitrary User Registration and Arbitrary Password Reset Vulnerability in Fruit Tree App

Evaluate Fruit Tree App is a learning and education app. There are arbitrary user registration and arbitrary password reset vulnerabilities in Fruit Tree App, which allow attackers to register any user and reset any user's password by grabbing packets and modifying cell phone numbers...

Trade Test Grabber App Has Arbitrary User Registration and Arbitrary Password Reset Vulnerabilities

Trade Test Grab App is a third-party service platform integrating trade, testing and inspection. Trade test to grab a single App there are any user registration and any password reset vulnerability, the attacker can register any user and reset any user password by grabbing packets and modifying t...

CVE-2017-12849: Exposure of Sensitive Information to an Unauthorized Actor

Response discrepancy in the login and password reset forms in SilverStripe CMS before 3.5.5 and 3.6.x before 3.6.1 allows remote attackers to enumerate users via timing attacks...

Arbitrary User Login and Password Reset Vulnerability in Birthless App

Birthless App is a platform that focuses on IVF pregnancy assistance services. Worry Free App has an arbitrary user login and password reset vulnerability, attackers can login to any user account and reset any user password by grabbing packets and modifying cell phone numbers...

E-Sic Software livre CMS - 'cpfcnpj' SQL Injection

Exploit Title: E-Sic Software livre CMS - Sql Injection Date: 12/10/2017 Exploit Author: Elber Tavares fireshellsecurity.team/ Vendor Homepage: https://softwarepublico.gov.br/ Version: 1.0 Tested on: kali linux, windows 7, 8.1, 10 - Firefox Download:...

Magento Information Disclosure Vulnerability

Magento is an open source PHP e-commerce system from Magento Inc. that provides rights management, search engine, and payment gateway.Magento Community Edition CE is a community edition.Magento Enterprise Edition EE is an enterprise edition. An information disclosure vulnerability exists in Magen...

Arbitrary Account Password Reset Vulnerability in OnStar iOS Client Server

OnStar iOS client is a smart driving system. An arbitrary account password reset vulnerability exists in the OnStar iOS client server. An attacker can reset the password of any client and perform unauthorized operations by intercepting the verification code in a packet...

Any Account Registration and Any Password Reset Vulnerabilities Exist in Anxiety Companion App

Anxious companion APP is a companion O2O service platform. There are arbitrary account registration and arbitrary password reset vulnerabilities in Anxin escort APP. Attackers can register any account and reset any password by capturing the verification code...

Multiple Vulnerabilities in the Magic Fly Broker App

Magic Fly Broker App is a mobile listing management software designed to help brokers increase orders. There are arbitrary user login and arbitrary password reset vulnerabilities in MagicFly Broker APP. Attackers can register any account and reset any password by capturing packets and interceptin...

Honey Raccoon Live App has multiple vulnerabilities

Honey Raccoon Live App is a live streaming platform for real people. There are arbitrary user registration and arbitrary password reset vulnerabilities in Honey Raccoon Live APP. Attackers can register any account and reset any password by grabbing packets to get the verification code...

Parent Helper App Has Multiple Vulnerabilities

Parent's Helper APP is a mobile home-school communication software developed by Beijing Aopeng Distance Education Center Co. The Parent's Helper APP is vulnerable to arbitrary user registration and arbitrary password reset. An attacker can register any account and reset any password by capturing...

Multiple Vulnerabilities in Photo Composer App

Picture Synthesizer APP is a picture synthesizer mobile software. Picture Synthesizer APP has arbitrary account registration and arbitrary password reset vulnerabilities. An attacker can register any account and reset any password by grabbing packets to get the verification code...

Arbitrary Account Registration and Password Reset Vulnerabilities in Tea Merchant APP

Tea Merchant APP is a software specialized in serving tea merchants. Tea Merchant APP has arbitrary account registration and password reset vulnerabilities. Attackers can register any account and reset any password by capturing packets and bursting the verification code...

Arbitrary Account Registration and Arbitrary Password Reset Vulnerability in Skin Beauty With Heart APP

Beauty with a Purpose App is a skincare app that allows you to test your skin type and learn more about skincare. There is an arbitrary account registration and arbitrary password reset vulnerability in Skin Care APP. Attackers can register any account and reset any password by capturing packets...

Best Clinical Practice App Has Arbitrary Registration Account and Arbitrary Password Reset Vulnerabilities

The Best Clinical Practice App is an application designed to provide medical practitioners with knowledge of diagnosis and treatment during clinical practice and learning. The Best Clinical Practice APP is vulnerable to arbitrary account registration and arbitrary password reset. An attacker can...

Dual Opening Assistant App has a logical design flaw

Double Open Assistant APP is a game assistance application. There is a logical design vulnerability in Dual Open Assistant APP. Attackers can arbitrarily register users and reset arbitrary passwords by capturing packets to obtain verification codes...

EYEE Beehive App Has Logic Design Flaws

EYEE Bee Tide App is an online shopping app. There is a logical design vulnerability in EYEE Beehive APP. An attacker can register any account and reset any password by grabbing packets and bursting the verification code...

Logic design flaws in DXN Global App

Dresdner Global App is a shopping software. There is a logical design vulnerability in the DXGlobal APP. An attacker can register any account, reset any password and change the payment amount by obtaining the verification code...