TouTou Shared Bike Android APP has an override access vulnerability

TouTou Shared Bike Android APP is a shared bike travel software for cities. TouTou Shared Bicycle Android APP has an override access vulnerability. After registering and logging into the system, the attacker can modify the user ID by grabbing packets to view any account information, including:...

CVE-2017-3743

If multiple users are concurrently logged into a single system where one user is sending a command via the Lenovo ToolsCenter Advanced Settings Utility ASU, UpdateXpress System Pack Installer UXSPI or Dynamic System Analysis DSA to a second machine, the other users may be able to see the user ID...

UBUNTU-CVE-2016-6190

SOGo before 2.3.12 and 3.x before 3.1.1 does not restrict access to the UID and DTSTAMP attributes, which allows remote authenticated users to obtain sensitive information about appointments with the "View the Date & Time" restriction, as demonstrated by correlating UIDs and DTSTAMPs between all...

PT-2013-4928 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.11.5 Description: The issue allows local users to bypass intended /proc/sys/net restrictions. This is due to the net ctl permissions function in net/sysctl net.c not properly determining uid and gid values,...

CVE-2011-1717

Skype for Android stores sensitive user data without encryption in sqlite3 databases that have weak permissions, which allows local applications to read user IDs, contacts, phone numbers, date of birth, instant message logs, and other private information...