Worry-Free Electricity Android APP has Arbitrary Account Password Reset Vulnerability

Electricity Worry-free APP is a cross electrical equipment professional service platform. Electricity Worry-free Android APP has an arbitrary account password reset vulnerability. The vulnerability allows attackers to use the vulnerability to change the password of the other party's cell phone...

Logic Design Vulnerability in Tlink IoT Cloud Service Platform Android App

TLINK Internet of Things is an open platform for Internet of Things products of Shenzhen Analog Technology Co. A logical design vulnerability exists in the Android App password recovery function of Tlink IoT cloud service platform. It allows the attacker to send unlimited SMS to the modified cell...

Left Neighborhood App Has Arbitrary User Password Reset Vulnerability

Left Neighbor APP is a virtual community service operation platform. Left Neighbor APP has an arbitrary user password reset vulnerability. An attacker can use this vulnerability to reset any user's password with just a cell phone number...

Willow Police App Has Arbitrary Account Login Vulnerability

Liuzhou Police APP is a police information application platform launched by Liuzhou Municipal Public Security Bureau. Liuzhou Police APP has an arbitrary account login vulnerability. By means of CAPTCHA blasting, an attacker can log in to any account through a cell phone number...

Jiaxing Public Security App Has Arbitrary Account Login Vulnerability

Jiaxing Public Security APP is a convenient mobile application for local people in Jiaxing to find local services, mainly including motor vehicle violation inquiry, immigration office appointment, police news, security, police map, law enforcement public and other functional services. Jiaxing...

Logic flaws in the Android version of the Shandong government services app

Shandong government service APP is a government information software created by the Shandong Government Office. The software can release the latest information of Shandong government services in time, support personalized subscription, full-text search function, to provide faster service for the...

Arbitrary Account Password Reset Vulnerability in PV Guard Android APP

PV Guard is a PV monitoring and operation management platform based on big data and knowledge base. The PV Guard Android APP has an arbitrary account password reset vulnerability, which allows attackers to exploit the vulnerability to change the password of the other party's cell phone number onl...

Wheat Pro Android App suffers from an overstepping access vulnerability

Wheat Pro app is a mobile office software that integrates PV plant monitoring, work order processing, PV plant troubleshooting and other functions. Wheat Pro Android App has an override access vulnerability. Attackers can use the vulnerability to arbitrarily view the user's cell phone number,...

Jinan government services micro-portal has arbitrary password reset vulnerability

Jinan government services micro-portal, able to release the latest information of Jinan Municipal Government Service Center Portal in a timely manner, the content of which includes clerical services, government information disclosure, communication and interaction, and satisfaction evaluation. It...

Guizhou Provincial People's Hospital's Android App Has Override Access Vulnerability

Guizhou Provincial People's Hospital APP is a medical app for local people in Guizhou, making it easier and faster for people to see a doctor. Download Guizhou Provincial People's Hospital APP to utilize ID cards, visiting cards and other identification to get all the information about the visit,...

‘Ghost Telephonist’ Attack Exploits 4G LTE Flaw to Hijack Phone Numbers

By Waqas According to UnicornTeam, a group of Chinese researchers from countrys This is a post from HackRead.com Read the original post: ‘Ghost Telephonist’ Attack Exploits 4G LTE Flaw to Hijack Phone Numbers...

Tongfang Mybody Smart Scale Android App Has Design Flaw Vulnerability

Tongfang Mybody Smart Scale Android app is a full-featured health management device. A design flaw vulnerability exists in the cell phone number verification login function of Tongfang Mybody Smart Scale Android app. An attacker can exploit the vulnerability to log into any user's account...

Arbitrary Password Reset Vulnerability in Paco Drive Android App

BaGoDrive is an O2O online and offline taxi application based on LBS geographical location developed by Jiangsu Xunzhi Network Technology Co. There is an arbitrary password reset vulnerability in the BaGeDrivingTo Android app, which allows attackers to reset the password by using the other party'...

Secure Mail gives Error: Your organization does not allow this action

- User opens Secure Mail. - Goes into Contacts. - Selects a contact. - Clicks on the contacts phone number. - Sees error message:Your organization does not allow this action...

Tootsie Bus Android app suffers from a cracked sign signature algorithm leading to arbitrary phone number login vulnerability

Tuk Tuk Bus is a bus shuttle customization mobile service platform for people who have the same travel needs. The Tuk Tuk Bus Android app suffers from a cracked sign signature algorithm leading to an arbitrary cell phone number login vulnerability. An attacker can exploit this vulnerability to lo...

Arbitrary User Password Reset Vulnerability in Sichuan Tianfu New District Chengdu Administrative App

Tianfu Government App is a credible government service platform. An arbitrary user password reset vulnerability exists in the Sichuan Tianfu New Area Chengdu Direct Administration App. An attacker can reset the password by using a cell phone number...

Beijing Cloud Fox Times Android App Has Arbitrary Password Reset Vulnerability

Beijing Cloud Fox Times Technology Co., Ltd. is a cutting-edge domestic special intelligent equipment research and development company, is the industry terminal and service solution experts. Beijing Cloud Fox Times Android App exists arbitrary password reset vulnerability, through the other party...

Uber: phone number exposure for riders/drivers given email/uuid

Hi , Summary I have found one more vulnerable endpoint that is leaking user's phone number when i submit UUID in the request. This attack works for both Driver and Rider. Security Impact We can get any Rider or Driver private phone number by knowing his UUID. Reproduction Steps 1 . Enter victim's...

Arbitrary Password Reset Vulnerability in Kingsoft Wordsmith Android App

Kingsoft Wordsmith is a translation and learning software from Kingsoft Corporation. An arbitrary password reset vulnerability exists in Kingsoft wordmaster android app. Due to a design flaw in the feature of changing cell phone number, an attacker can reset the password of another person by only...

Game Multi Android app has design flaws in password recovery feature

Game Multi app is a software that focuses on serving game users. Game Multi Android app has a vulnerability in the design of the password recovery function, which can be exploited by an attacker to change his password through another person's cell phone number, log in to the system and obtain...