iowabicyclecoalition.org Cross Site Scripting vulnerability OBB-3307887

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

unitedbicyclesupply.com Cross Site Scripting vulnerability OBB-3154727

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bicycletouringpro.com Improper Access Control vulnerability OBB-1285767

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Guangdong Yijiang Technology Co., Ltd. small strong bike App there are logic flaws vulnerability

Xiaoqiang Bicycle App is an Internet-based bicycle sharing solution, focusing on short-distance travel. Users can find a bike online anytime and anywhere through the cell phone app, scan the code for the bike offline, and also realize GPS positioning, real-time billing, online payment and other...

Copenhagen city’s bicycle sharing system hacked; 1,800 bikes affected

By Waqas You have heard about ride-sharing companies like Uber and Careem This is a post from HackRead.com Read the original post: Copenhagen city's bicycle sharing system hacked; 1,800 bikes affected...

Touhou Shared Bike Android App Has Logic Design Flaws

TouTou Shared Bike Android APP is a shared bike travel software for cities. A logical design vulnerability exists in TouTou Shared Bicycle Android APP. An attacker can log in to any user account and perform unauthorized operations by grabbing packets and blasting CAPTCHA...

Jiangcheng Yi Bicycle Android APP cell phone SMS verification function has any cell phone number login vulnerability

Jiangcheng Easy Bike Android APP is a local intelligent public bicycle rental system for Wuhan. There is an arbitrary cell phone number login vulnerability in the SMS verification function of Jiangcheng Yi Bicycle Android APP. This allows an attacker to log in to another person's account by simpl...

Bubai Bike Android APP has arbitrary cell phone number login vulnerability

Coolbike Android APP is a mobile bike rental service software created by Shenzhen Venture Win Network Technology Co. There is an arbitrary cell phone number login vulnerability in the Bai Bai Bicycle Android APP, allowing attackers to exploit the vulnerability to log in to their accounts with onl...

Naviki – the bicycle satnav - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Naviki – the bicycle satnav published at the 'play' market has multiple vulnerabilities...

Bike Citizens - Bicycle GPS - Certificates or keys found, Corrupted files, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Bike Citizens - Bicycle GPS published at the 'play' market has multiple vulnerabilities...

Spring Source OXM Remote OS Command Injection when XStream and IBM JRE are used

Reference: http://static.springsource.org/spring/docs/3.0.x/spring-framework-reference/html/oxm.htmld0e26722 Product: Spring Source OXM Object/XML Mapping Vendor: VMware Vulnerable Version: 3.0.4 only when XStream and IBM JRE are used Status: Fixed Vendor Notification: 12 October 2010 Vendor Fix:...

Spring Source OXM 3.0.4 Command Injection

Reference: http://static.springsource.org/spring/docs/3.0.x/spring-framework-reference/html/oxm.htmld0e26722 Product: Spring Source OXM Object/XML Mapping Vendor: VMware Vulnerable Version: 3.0.4 only when XStream and IBM JRE are used Status: Fixed Vendor Notification: 12 October 2010 Vendor Fix:...