Apache CXF OpenId connect token service information disclosure vulnerability

Apache CXF is an open source Web services framework . A security vulnerability in the Apache CXF OpenId connect token service implementation allows remote attackers to exploit the vulnerability to submit special requests that can steal authentication code distributed to other clients for...

Nextcloud: Message Authentication Codes calculated by the Default Encryption Module allow an attacker to silently overwrite blocks in a file

First: The default encryption module bundled with the Nextcloud Server creates SHA256-HMAC based message authentication codes for each individual 6072 byte-sized block of data. These are the steps to calculate the MAC: Take the user password and harden it with SHA256-PBKDF2 denoted as $passPhrase...

GuangWei GuangWei Honda APPv2.1 has information leakage vulnerability

GuangWei GAC Honda APP is an APP that provides car owners with remote control of their cars, one-click car inspection, GPS positioning, violation information query, fuel consumption analysis, convenient merchant interaction, quick query of car information and other functions. A vulnerability exis...

Lovefilm APP suffers from arbitrary user login vulnerability

Love Shadow APP is a video editing software for cell phones. There is an arbitrary user login vulnerability in Love Shadow APP. An attacker can log into any user account by capturing packets and obtaining authentication codes...

CVE-2013-7400

The Direct Mail directmail extension before 3.1.2 for TYPO3 allows remote attackers to obtain sensitive information by leveraging improper checking of authentication codes...

Logic design flaws in the Ten Cent Share app

Dime Share app is a smart ad push platform that enables users to get cash rewards by clicking on business information posters. A logical design vulnerability exists in the Dime Share app. An attacker can reset and log into other users' systems by capturing authentication codes in a packet...

Phoenix Gold app has logic design flaws

Phoenix Gold app is a financial information service platform created by Shenzhen Jinshi Internet Financial Service Co. Phoenix Gold Service app has a logical design vulnerability. Attackers can log in to other users' systems, reset arbitrary passwords and perform unauthorized operations by...

Six Degrees of Gold app has logic design flaws

Six Degrees Gold app is an internet investment banking platform. Six Degrees of Gold app has a logical design vulnerability. Attackers can log into other users' systems, reset arbitrary passwords and perform unauthorized operations by capturing authentication codes in a packet...

Rice Gold app has logic design flaws

Paddy Gold app is a financial service platform created by Xiamen Golden Paddy Financial. A logical design vulnerability exists in the Paddy Gold app. Attackers can log in to other users' systems, reset arbitrary passwords and perform unauthorized operations by capturing authentication codes in a...

GozNym Trojan Attackers Set Sights on Europe, Poland

The banking malware GozNym has legs; only a few weeks after the hybrid Trojan was discovered, it has reportedly spread into Europe and begun plaguing banking customers in Poland with redirection attacks. The malware has started targeting corporate, SMB, investment banking and consumer accounts at...