Observable Timing Discrepancy in Login Portal

Description An observable discrepancy in response times is present in the login portal. When brute forcing valid email accounts, the timing on a valid account is significantly higher than that of an invalid user account. This is likely due to the use of Bcrypt's compare function being utilized by...

Speedmaster Mom and Pop App has SMS Bombing Vulnerability

Speed Maternity App is a shopping application platform for maternity and baby products. There is an SMS bombing vulnerability in the lucky draw section of the Speed Maternity and Baby APP, where an attacker can obtain a specified prize by modifying the function of the prize ID, and consume server...