Arbitrary Password Reset Vulnerability in Paco Drive Android App

BaGoDrive is an O2O online and offline taxi application based on LBS geographical location developed by Jiangsu Xunzhi Network Technology Co. There is an arbitrary password reset vulnerability in the BaGeDrivingTo Android app, which allows attackers to reset the password by using the other party'...

Secure Mail gives Error: Your organization does not allow this action

- User opens Secure Mail. - Goes into Contacts. - Selects a contact. - Clicks on the contacts phone number. - Sees error message:Your organization does not allow this action...

Beijing Cloud Fox Times Android App Has Arbitrary Password Reset Vulnerability

Beijing Cloud Fox Times Technology Co., Ltd. is a cutting-edge domestic special intelligent equipment research and development company, is the industry terminal and service solution experts. Beijing Cloud Fox Times Android App exists arbitrary password reset vulnerability, through the other party...

Tootsie Bus Android app suffers from a cracked sign signature algorithm leading to arbitrary phone number login vulnerability

Tuk Tuk Bus is a bus shuttle customization mobile service platform for people who have the same travel needs. The Tuk Tuk Bus Android app suffers from a cracked sign signature algorithm leading to an arbitrary cell phone number login vulnerability. An attacker can exploit this vulnerability to lo...

Arbitrary User Password Reset Vulnerability in Sichuan Tianfu New District Chengdu Administrative App

Tianfu Government App is a credible government service platform. An arbitrary user password reset vulnerability exists in the Sichuan Tianfu New Area Chengdu Direct Administration App. An attacker can reset the password by using a cell phone number...

Uber: phone number exposure for riders/drivers given email/uuid

Hi , Summary I have found one more vulnerable endpoint that is leaking user's phone number when i submit UUID in the request. This attack works for both Driver and Rider. Security Impact We can get any Rider or Driver private phone number by knowing his UUID. Reproduction Steps 1 . Enter victim's...

Arbitrary Password Reset Vulnerability in Kingsoft Wordsmith Android App

Kingsoft Wordsmith is a translation and learning software from Kingsoft Corporation. An arbitrary password reset vulnerability exists in Kingsoft wordmaster android app. Due to a design flaw in the feature of changing cell phone number, an attacker can reset the password of another person by only...

AIO AIO in-car Android App CAPTCHA has design flaws

Shenzhen Dudu Intelligent Technology Co., Ltd. is an innovative technology enterprise focusing on intelligent in-vehicle systems, high-end in-vehicle wearable devices and the construction of car networking ecosystem. AIO AIO in-vehicle Android App verification code has design flaws, attackers can...

Game Multi Android app has design flaws in password recovery feature

Game Multi app is a software that focuses on serving game users. Game Multi Android app has a vulnerability in the design of the password recovery function, which can be exploited by an attacker to change his password through another person's cell phone number, log in to the system and obtain...

Arbitrary Account Login Vulnerability in Dingtone Travel App

Dingtone Travel APP is a new energy car sharing platform based on internet technology. A design flaw vulnerability exists in the Dingtone Mobility Android APP's cell phone SMS verification code login function, allowing attackers to exploit the vulnerability to log in to another person's account...

Panda Car Android APP has arbitrary cell phone number login vulnerability

Panda Car Android APP is a car sharing software. The Panda Car Android APP suffers from an arbitrary cell phone number login vulnerability. The vulnerability allows an attacker to log in to another person's account using only their cell phone number...

Jiangcheng Yi Bicycle Android APP cell phone SMS verification function has any cell phone number login vulnerability

Jiangcheng Easy Bike Android APP is a local intelligent public bicycle rental system for Wuhan. There is an arbitrary cell phone number login vulnerability in the SMS verification function of Jiangcheng Yi Bicycle Android APP. This allows an attacker to log in to another person's account by simpl...

Cloud Cycling Android APP has arbitrary password reset vulnerability

Cloud Bike Android App is a transportation navigation app. An arbitrary password reset vulnerability exists in the password recovery function of Cloud Bike Android APP. An attacker can reset another person's password by simply using their cell phone number...

Coolbike Android APP has arbitrary cell phone number login vulnerability

Coolbike Android APP is a mobile bike rental service software created by Shenzhen Venture Win Network Technology Co. Coolbike Android APP has an arbitrary cell phone number login vulnerability, allowing attackers to exploit the vulnerability to log in to their accounts with only another person's...

Bubai Bike Android APP has arbitrary cell phone number login vulnerability

Coolbike Android APP is a mobile bike rental service software created by Shenzhen Venture Win Network Technology Co. There is an arbitrary cell phone number login vulnerability in the Bai Bai Bicycle Android APP, allowing attackers to exploit the vulnerability to log in to their accounts with onl...

Arbitrary Password Reset Vulnerability in RideSmart Android App

Ride Free Android AP is a mobile application to keep your vehicle safe. Ride Carefree Android APP has an arbitrary password reset vulnerability that allows an attacker to exploit the vulnerability to change the password of the other party simply by knowing their cell phone number to gain access t...

Arbitrary Password Reset Vulnerability in Chickie's Travel Android App

Chickie Mobility Android App is an app that provides public bike rental services. There is an arbitrary password reset vulnerability in Qiqi Travel Android APP. It allows an attacker to reset another person's password simply by knowing their cell phone number, and can view any other person's...

Panasonic Smart Lock Android App Has Arbitrary Password Reset Vulnerability

Panasonic Smart Lock Android App is a smart hardware device. Panasonic Smart Lock Android App has an arbitrary password reset vulnerability. Allows an attacker to change the other party's password simply by knowing their cell phone number and obtain sensitive user information...

Information leakage vulnerability in Yunmai Good Light APP

Yunmai Good Light APP is a special app for smart weight scale launched by Yunmai. There is an information leakage vulnerability in Yunmai Good Light APP. Since the entire APP only uses token as a security restriction, the token generation algorithm can be cracked to obtain sensitive information,...

Taoyun Interactive Android app suffers from arbitrary password reset vulnerability

Tao Yun Interactive App is a children's learning and socialization app. Taoyun Interactive Android app has an arbitrary password reset vulnerability. It allows attackers to exploit the vulnerability to change the password of the other party by only requiring their cell phone number...