Happy Xiongbao Cloud Phone Watch Android app has arbitrary password reset vulnerability

Happy Xiongbao Cloud Phone Watch APP is an APP that works with the Happy Xiongbao Cloud Phone Watch hardware device. The Happy Xiongbao Cloud Phone Watch Android app has an arbitrary password reset vulnerability. It allows attackers to exploit the vulnerability to change the password of the other...

RealCaller Phone number lookup - Certificates or keys found, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application RealCaller Phone number lookup published at the 'play' market has multiple vulnerabilities...

Beijing Evolver Robotics Fatty App Client Has Overstepping Vulnerabilities

Beijing Evolver Robotics Technology Co., Ltd. is engaged in the research and development of intelligent robots for home and commercial use, and has developed two versions of intelligent robots for home and commercial use, FABO. Beijing Evolver Robotics FABO app client has an overstepping...

Ubiquiti Robotics Alpha2 Android app has arbitrary password reset vulnerability

Ubitus is a company that integrates artificial intelligence and humanoid robotics research and development, platform software development and utilization, and product sales. An arbitrary password reset vulnerability exists in the Ubitus Robotics Alpha2 Android app. The vulnerability allows an...

Arbitrary Password Reset Vulnerability in ZTE E Academy APP

ZTE E Academy APP is a professional skills learning software. There is an arbitrary password reset vulnerability in ZTE E Academy APP IOS version and Android version. By using a cell phone number to retrieve the password when the SMS verification code is returned directly to the response, you onl...

HackerOne in the third quarter TOP 5 vulnerability report-vulnerability warning-the black bar safety net

Foreword HackerOne in the third quarter TOP 5 vulnerability reports are coming announced. In this season, we participated in the Vegas hacker conference, hosted Hacked the World, and in the Reddit discussion above, some of the HackerOne problem. HackerOne vulnerability report from platform to...

Uber: SMS/Call spamming due to truncated phone number

Due to improperly validation of phone numbers during the Android Rider sign-up, it was possible to spam a phone number with verification calls and texts. By inputting an 11 or 12 digit phone number, it would be truncated to 10 digits, resulting in the same number from varying inputs...

Small in the open broadcast app has arbitrary user registration vulnerability

Little in the Open App is a powerful mobile app that combines chatting and dating with watching videos. An arbitrary user registration vulnerability exists in version 2.4.3 of Xiao-Jiao-Kaizhan APP, which allows attackers to modify a cell phone number and register an account at will...

Uber: Attacker could setup reminder remotely using brute force

Hi, Attacker could setup the reminder for bulk no of amount of accounts using there phone no's. He could setup infinite no of reminders. Tried brute force for 100 times worked perfectly here is the link : https://widgets.uber.com/american-airlines-reminders/ Here any phone-no is accepted. Actuall...

Instacart: shopper login_code's can be brute forced

Hi, I didn't see in the scope of your program, but it is a security weakness, so you must know this. If you don't care about shoppers' accounts then you can just mark this report as informative. First I tried to register a shopper account at https://shoppers.instacart.com/ Used a fake email addre...

Facebook User ID Bypass Issue

Document Title: =============== Facebook Bug Bounty 33 - Bypass ID user to linked Phone Number Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1896 Release Date: ============= 2016-08-08 Vulnerability Laboratory ID VL-ID:...

Facebook BB #33 - Bypass ID to linked Phone Number

Document Title: =============== Facebook BB 33 - Bypass ID to linked Phone Number References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1896 Release Date: ============= 2016-08-08 Vulnerability Laboratory ID VL-ID: ==================================== 1896...

Facebook BB #33 - Bypass ID to linked Phone Number

Document Title: =============== Facebook BB 33 - Bypass ID to linked Phone Number References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1896 Release Date: ============= 2016-08-07 Vulnerability Laboratory ID VL-ID: ==================================== 1896...

That's A Clever Hack! How anyone could make Money from Google and Microsoft

Smart hackers could exploit a loophole that could allow them to steal a significant amount of cash from Google, Microsoft and Instagram using a Premium rate phone number. Security researcher Arne Swinnen from Belgium has discovered an ingenious way to steal money from big tech companies like...

How to Hack Facebook Account Just by Knowing Phone Number

Hacking Facebook account is one of the major queries on the Internet today. It's hard to find — how to hack Facebook account or facebook messenger, but researchers found a way that can allow someone to hack Facebook account passwords with only the target's phone number and some resources. Yes, yo...

Uber: Phone Number Enumeration

I discovered it is possible to retrieve all Uber's customer's cell phone numbers using an API endpoint. While going through a sign up form, I noticed that the page was making an ajax call to an API to validate the email address being entered and to make sure it doesn't already belong to an accoun...

Unspecified vulnerability in Oracle E-Business Suite CRM Wireless component (CNVD-2016-02569)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. An unspecified vulnerability in the Call Phone Number Page subcomponent of the Oracle CRM Wireless component of Oracle E-Business Suite version 12.1.3...

CVE-2016-3439

Unspecified vulnerability in the Oracle CRM Wireless component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Call Phone Number Page...

CVE-2016-3439

Unspecified vulnerability in the Oracle CRM Wireless component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Call Phone Number Page...

Design/Logic Flaw

Unspecified vulnerability in the Oracle CRM Wireless component in Oracle E-Business Suite 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Call Phone Number Page...