198 matches found
CVE-2017-8028
In Pivotal Spring-LDAP versions 1.3.0 - 2.3.1, when connected to some LDAP servers, when no additional attributes are bound, and when using LDAP BindAuthenticator with org.springframework.ldap.core.support.DefaultTlsDirContextAuthenticationStrategy as the authentication strategy, and setting...
CVE-2017-8028
In Pivotal Spring-LDAP versions 1.3.0 - 2.3.1, when connected to some LDAP servers, when no additional attributes are bound, and when using LDAP BindAuthenticator with org.springframework.ldap.core.support.DefaultTlsDirContextAuthenticationStrategy as the authentication strategy, and setting...
[SECURITY] [DSA 4046-1] libspring-ldap-java security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4046-1 [email protected] https://www.debian.org/security/ Sebastien Delafond November 22, 2017 https://www.debian.org/security/faq -...
CVE-2017-8028
A vulnerability was found in spring-ldap that allows an attacker to authenticate with an arbitrary password. When spring-ldap connected to some LDAP servers, when no additional attributes are bound, when using LDAP BindAuthenticator with...
Arbitrary Account Password Reset Vulnerability in Goodbody Knowledge Android APP of Tongfang Co.
Good Body Knowledge Android App is a software to detect the health data in your body. An arbitrary account password reset vulnerability exists in the Good Body Knowledge Android APP of Tongfang Co. An attacker can reset any account password by grabbing a packet to obtain a verification code throu...
Comments Off on Arbitrary User Registration and Arbitrary Password Reset Vulnerability in Fruit Tree App
Evaluate Fruit Tree App is a learning and education app. There are arbitrary user registration and arbitrary password reset vulnerabilities in Fruit Tree App, which allow attackers to register any user and reset any user's password by grabbing packets and modifying cell phone numbers...
Multiple Vulnerabilities in the Magic Fly Broker App
Magic Fly Broker App is a mobile listing management software designed to help brokers increase orders. There are arbitrary user login and arbitrary password reset vulnerabilities in MagicFly Broker APP. Attackers can register any account and reset any password by capturing packets and interceptin...
Parent Helper App Has Multiple Vulnerabilities
Parent's Helper APP is a mobile home-school communication software developed by Beijing Aopeng Distance Education Center Co. The Parent's Helper APP is vulnerable to arbitrary user registration and arbitrary password reset. An attacker can register any account and reset any password by capturing...
Arbitrary User Password Reset Vulnerability in Bunker Busters
Bunker Fortress is the industry's first software form of the Fortress, providing a centralized authentication, centralized access authorization, centralized access management, centralized operation audit and a single point of simplified operation and management required for remote operations and...
Arbitrary Account Password Reset Vulnerability in Haiwell Cloud SCADA Android App
Haiwell Cloud SCADA is an industrial automation monitoring and management platform software based on .NET Framework developed by Xiamen Haiwell Technology Co. An arbitrary account password reset vulnerability exists in the Haiwell Cloud SCADA Android APP. An attacker can reset any account passwor...
Hanbanggaoke IP Camera - Arbitrary Password Change
Vulnerability summary The following advisory describes an arbitrary password change vulnerability found in Hanbanggaoke webcams. Beijing Hanbang Technology, “one of the first enterprises entering into digital video surveillance industry, has been focusing on R&D of products and technology of...
Hanbanggaoke IP Camera - Arbitrary Password Change
Hanbanggaoke IP Camera - Arbitrary Password Change Vulnerability summary The following advisory describes an arbitrary password change vulnerability found in Hanbanggaoke webcams. Beijing Hanbang Technology, “one of the first enterprises entering into digital video surveillance industry, has been...
Search Easy Borrowing App Exists with Arbitrary Password Reset Vulnerability
Search Easy Borrow APP is a smart loan search information service platform. There is an arbitrary password reset vulnerability in SearchEaseLendAPP, which allows an attacker to change the account password of the whole website in bulk by cooperating with the username enumeration...
Shenzhen Yuanzheng Technology golo merchant Android APP has arbitrary account password reset vulnerability
golo merchant is an app developed by Shenzhen Yuanzheng Technology to provide auto repair services. There is an arbitrary account password reset vulnerability in the golo merchant android app of Shenzhen Yuanzheng Technology. An attacker can reset any registered user's password by means of CAPTCH...
Left Neighborhood App Has Arbitrary User Password Reset Vulnerability
Left Neighbor APP is a virtual community service operation platform. Left Neighbor APP has an arbitrary user password reset vulnerability. An attacker can use this vulnerability to reset any user's password with just a cell phone number...
Arbitrary Password Reset and Background Arbitrary File Upload Vulnerability in Wanda Information Food Safety Information Traceability System
Wanda Information Food Safety Information Traceability System is a platform for analyzing and processing the quality and safety data of food enterprises and realizing the functions of information disclosure, public inquiry, diagnosis and early warning, and quality complaint. Wanda Information Foo...
Mobile movie app has logic design flaws
Mobile Movie App is a video product specially launched for the majority of movie lovers. There is a logical design vulnerability in the mobile movie app. Attackers can use the vulnerability to perform arbitrary user registration, arbitrary password reset operations...
Brush Bracelet App Has Design Logic Flaws
The Brush Bracelet app is a smart wearable device app. There is a design logic vulnerability in Brush Bracelet app. An attacker can exploit the vulnerability to perform arbitrary user registration and arbitrary password reset operations...
Zhengnuo (Shanghai) Energy Conservation Technology Co., Ltd Opler APP has multiple vulnerabilities
Opler APP is a mobile software with a complete backend management system. Zhengnuo Shanghai Energy Conservation Technology Co., Ltd Opler APP exists arbitrary password reset, arbitrary user registration, override and stored cross-site scripting vulnerabilities. Attackers can use the vulnerability...