Bubai Bike Android APP has arbitrary cell phone number login vulnerability

Coolbike Android APP is a mobile bike rental service software created by Shenzhen Venture Win Network Technology Co. There is an arbitrary cell phone number login vulnerability in the Bai Bai Bicycle Android APP, allowing attackers to exploit the vulnerability to log in to their accounts with onl...

Arbitrary Password Reset Vulnerability in RideSmart Android App

Ride Free Android AP is a mobile application to keep your vehicle safe. Ride Carefree Android APP has an arbitrary password reset vulnerability that allows an attacker to exploit the vulnerability to change the password of the other party simply by knowing their cell phone number to gain access t...

Panasonic Smart Lock Android App Has Arbitrary Password Reset Vulnerability

Panasonic Smart Lock Android App is a smart hardware device. Panasonic Smart Lock Android App has an arbitrary password reset vulnerability. Allows an attacker to change the other party's password simply by knowing their cell phone number and obtain sensitive user information...

Arbitrary Password Reset Vulnerability in Chickie's Travel Android App

Chickie Mobility Android App is an app that provides public bike rental services. There is an arbitrary password reset vulnerability in Qiqi Travel Android APP. It allows an attacker to reset another person's password simply by knowing their cell phone number, and can view any other person's...

Information leakage vulnerability in Yunmai Good Light APP

Yunmai Good Light APP is a special app for smart weight scale launched by Yunmai. There is an information leakage vulnerability in Yunmai Good Light APP. Since the entire APP only uses token as a security restriction, the token generation algorithm can be cracked to obtain sensitive information,...

Taoyun Interactive Android app suffers from arbitrary password reset vulnerability

Tao Yun Interactive App is a children's learning and socialization app. Taoyun Interactive Android app has an arbitrary password reset vulnerability. It allows attackers to exploit the vulnerability to change the password of the other party by only requiring their cell phone number...

Happy Xiongbao Cloud Phone Watch Android app has arbitrary password reset vulnerability

Happy Xiongbao Cloud Phone Watch APP is an APP that works with the Happy Xiongbao Cloud Phone Watch hardware device. The Happy Xiongbao Cloud Phone Watch Android app has an arbitrary password reset vulnerability. It allows attackers to exploit the vulnerability to change the password of the other...

RealCaller Phone number lookup - Certificates or keys found, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application RealCaller Phone number lookup published at the 'play' market has multiple vulnerabilities...

Ubiquiti Robotics Alpha2 Android app has arbitrary password reset vulnerability

Ubitus is a company that integrates artificial intelligence and humanoid robotics research and development, platform software development and utilization, and product sales. An arbitrary password reset vulnerability exists in the Ubitus Robotics Alpha2 Android app. The vulnerability allows an...

Beijing Evolver Robotics Fatty App Client Has Overstepping Vulnerabilities

Beijing Evolver Robotics Technology Co., Ltd. is engaged in the research and development of intelligent robots for home and commercial use, and has developed two versions of intelligent robots for home and commercial use, FABO. Beijing Evolver Robotics FABO app client has an overstepping...

Arbitrary Password Reset Vulnerability in ZTE E Academy APP

ZTE E Academy APP is a professional skills learning software. There is an arbitrary password reset vulnerability in ZTE E Academy APP IOS version and Android version. By using a cell phone number to retrieve the password when the SMS verification code is returned directly to the response, you onl...

HackerOne in the third quarter TOP 5 vulnerability report-vulnerability warning-the black bar safety net

Foreword HackerOne in the third quarter TOP 5 vulnerability reports are coming announced. In this season, we participated in the Vegas hacker conference, hosted Hacked the World, and in the Reddit discussion above, some of the HackerOne problem. HackerOne vulnerability report from platform to...

Uber: SMS/Call spamming due to truncated phone number

Due to improperly validation of phone numbers during the Android Rider sign-up, it was possible to spam a phone number with verification calls and texts. By inputting an 11 or 12 digit phone number, it would be truncated to 10 digits, resulting in the same number from varying inputs...

Small in the open broadcast app has arbitrary user registration vulnerability

Little in the Open App is a powerful mobile app that combines chatting and dating with watching videos. An arbitrary user registration vulnerability exists in version 2.4.3 of Xiao-Jiao-Kaizhan APP, which allows attackers to modify a cell phone number and register an account at will...

Uber: Attacker could setup reminder remotely using brute force

Hi, Attacker could setup the reminder for bulk no of amount of accounts using there phone no's. He could setup infinite no of reminders. Tried brute force for 100 times worked perfectly here is the link : https://widgets.uber.com/american-airlines-reminders/ Here any phone-no is accepted. Actuall...

Instacart: shopper login_code's can be brute forced

Hi, I didn't see in the scope of your program, but it is a security weakness, so you must know this. If you don't care about shoppers' accounts then you can just mark this report as informative. First I tried to register a shopper account at https://shoppers.instacart.com/ Used a fake email addre...

Facebook User ID Bypass Issue

Document Title: =============== Facebook Bug Bounty 33 - Bypass ID user to linked Phone Number Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1896 Release Date: ============= 2016-08-08 Vulnerability Laboratory ID VL-ID:...

Facebook BB #33 - Bypass ID to linked Phone Number

Document Title: =============== Facebook BB 33 - Bypass ID to linked Phone Number References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1896 Release Date: ============= 2016-08-08 Vulnerability Laboratory ID VL-ID: ==================================== 1896...

Facebook BB #33 - Bypass ID to linked Phone Number

Document Title: =============== Facebook BB 33 - Bypass ID to linked Phone Number References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1896 Release Date: ============= 2016-08-07 Vulnerability Laboratory ID VL-ID: ==================================== 1896...

That's A Clever Hack! How anyone could make Money from Google and Microsoft

Smart hackers could exploit a loophole that could allow them to steal a significant amount of cash from Google, Microsoft and Instagram using a Premium rate phone number. Security researcher Arne Swinnen from Belgium has discovered an ingenious way to steal money from big tech companies like...