First Hacker Convicted of 'SIM Swapping' Attack Gets 10 Years in Prison

A 20-year-old college student who stole cryptocurrency worth more than $5 million by hijacking victims' phone numbers has pleaded guilty and accepted a sentence of 10 years in prison. Ortiz was arrested last year on charges of siphoning millions of dollars in cryptocurrency from around 40 victims...

QIWI: Возможность регистрации на сайте qiwi.com на любой номер телефона

Summary При регистрации на сайте qiwi.com присылается один и тот же код подтверждения в СМС. Impact Возможность зарегистрироваться под любым новым пользователем за счет перебора кода из СМС...

Information leakage vulnerability in Dr. Fannie's Broker APP of Guangzhou Live World Network Co.

Dr. Housing Broker - mobile home selling, home price checking, commission checking, showing, customer reporting, customer management, convenient and real. CAPTCHA Information Leakage: This vulnerability mainly occurs when registering and retrieving passwords, the server will return the CAPTCHA to...

Facebook Graph OpenSearch Phone Number Metadata Crosswalk Mapping

!/usr/bin/perl Facebook 'Graph' OpenSearch Phone Number metadata crosswalk mapping PoC 2018 Todor Donev https://ethical-hacker.org/ https://facebook.com/ethicalhackerorg Description: Criminal hacker CRACKER can take advantage of this weakness by creating a specialized database to manipulate...

VK.com: Определение id по номеру телефона

Недостаточность проверок в определенных запросах...

Th3Inspector - Tool for Information Gathering

Tool For Information Gathering. Usage Short Form| Long Form| Description ---|---|--- -i| --info| Website Information -n| --number| Phone Number Information -mx| --mailserver| Find IP Address And E-mail Server -w| --whois| Domain Whois Lookup -l| --location| Find Website/IP Address Location -c|...

Design/Logic Flaw

Jolla Sailfish OS before 1.1.2.16 allows remote attackers to spoof phone numbers and trigger calls to arbitrary numbers via spaces in a tel: URL...

SMS Bombing Vulnerability in Xiaofeng Air Ching App Android Version

Ltd. developed with the work of the Xiao Feng Air Dorothy system APP, mainly used to monitor the indoor air quality and Xiao Feng Air Dorothy internal and external machine running status, monitoring items including PM2.5, formaldehyde, oxygen, temperature and humidity, and can be through the APP...

Arbitrary Account Password Reset Vulnerability in Zhigao Cloud Air Conditioner App Android Version

Cloud air conditioning refers to intelligent air conditioning equipment that uses cloud computing technology to upgrade and manage existing applications on the basis of the core technology of refrigeration, which possesses many application advantages such as massive cloud service resources, remot...

Out-of-authority access vulnerability in Butler Smart App for Android

The Butler Smart App is a mobile application that goes along with the smart cat eye device. The Android version of Butler Smart APP suffers from an overstepping access vulnerability, which allows an attacker to log in to other users' systems and perform unauthorized operations by grabbing packets...

Wise Heat Temperature Control App for Android has an arbitrary account password reset vulnerability

Smart Heat Temperature Control APP a home temperature control software, users only need to add the home's Internet-accessible thermostat to the software, you can use your phone or tablet to control the temperature of your home's HVAC equipment. The Android version of Smart Heat Temperature Contro...

Xiaofeng Air Ching App for Android has an overstepping loophole

Ltd. developed with the work of the Xiao Feng Air Dorothy system APP, mainly used to monitor the indoor air quality and Xiao Feng Air Dorothy internal and external machine running status, monitoring items including PM2.5, formaldehyde, oxygen, temperature and humidity, and can be through the APP...

Arbitrary Account Password Reset Vulnerability in Netxi Smart Android APP

Netxi Smart Android APP is a water purifier monitoring software. Netxi Smart Android APP has a reset any account password vulnerability, the attacker only need the other party's cell phone number to change their passwords, leak the user's sensitive information or loss of funds...

Rimet Wifi Smart Temperature Control Android APP has an override access vulnerability

Rimet Wifi Smart Temperature Control Android APP is a management platform for smart hardware devices. Rimet Wifi Intelligent Temperature Control Android APP has an override access vulnerability. After logging into the client, the attacker can obtain sensitive information such as patient's name,...

Logic design flaws in Jia Yi Chong App

Jia Yi Charge App is a mobile application for city charging pile information inquiry and use. There is a logical design vulnerability in JiaYiCharge App, which allows an attacker to register any user and reset any user's password by grabbing packets and modifying the cell phone number...

Trade Test Grabber App Has Arbitrary User Registration and Arbitrary Password Reset Vulnerabilities

Trade Test Grab App is a third-party service platform integrating trade, testing and inspection. Trade test to grab a single App there are any user registration and any password reset vulnerability, the attacker can register any user and reset any user password by grabbing packets and modifying t...

Arbitrary User Login and Password Reset Vulnerability in Birthless App

Birthless App is a platform that focuses on IVF pregnancy assistance services. Worry Free App has an arbitrary user login and password reset vulnerability, attackers can login to any user account and reset any user password by grabbing packets and modifying cell phone numbers...

Comments Off on Arbitrary User Registration and Arbitrary Password Reset Vulnerability in Fruit Tree App

Evaluate Fruit Tree App is a learning and education app. There are arbitrary user registration and arbitrary password reset vulnerabilities in Fruit Tree App, which allow attackers to register any user and reset any user's password by grabbing packets and modifying cell phone numbers...

Arbitrary User Login Vulnerability in 365 Housing Worry-Free App

365 Housing Worry-Free App is a home service app that provides one-stop service for daily home maintenance, repairs, tool rental and more. 365 Housing Worry-Free App has an arbitrary user login vulnerability, attackers can login to any user account by grabbing packets and modifying the cell phone...

Carve Show English App Has a Logic Design Trap Vulnerability

Carve Show English App is a foreign language learning software. There is a vulnerability in the logical design of the app that allows an attacker to register any user and reset the user's password by modifying the cell phone number...