Pivotal Cloud Foundry Runtime cf-release, UAA and Pivotal Cloud Foundry Elastic Runtime Cross-Site Request Forgery Vulnerabilities

Pivotal Cloud Foundry PCF Runtime cf-release and others are products of Pivotal Software, Inc. PCF is an open source Platform-as-a-Service PaaS cloud computing platform that provides container scheduling, continuous delivery, and automated service deployment. cf-release is a release of PCF. UAA i...

Shenzhen Yuanzheng Technology golo Android APP has arbitrary account login vulnerability

golo APP is a social networking application that uses instant messaging as a communication platform to connect automotive repair technicians with car owners. A vulnerability exists in Shenzhen Yuanzheng Technology's golo Android APP that allows an attacker to log in to any account. An attacker ca...

YouYaX论坛前台任意账户登入（cookie伪造）漏洞

No description provided by source...

extmail sid 漏洞

简要描述： 通过sid登录任意账户 详细说明： 1. 访问：http://mail.expacta.com.cn/extmail/tmp/ 获取到未过期sid比如：http://mail.expacta.com.cn/extmail/tmp/sid2bb0a258fad7e8b9701b0a9ce28e6c64， “2bb0a258fad7e8b9701b0a9ce28e6c64”为sid） 2. 访问http://mail.expacta.com.cn，通过firebug或者其他方式 新增cookiesid=2bb0a258fad7e8b9701b0a9ce28e6c64 3...