Advanced Dork Searching Utility: Zeus-Scanner

Zeus is an advanced reconnaissance utility designed to make web application reconnaissance simple. Zeus comes complete with a powerful built-in URL parsing engine, multiple search engine compatibility, the ability to extract URLs from both ban and webcache URLs, the ability to run multiple...

Multiple Vulnerabilities in the Top Discount App

Top Discount App is a mobile shopping application. Top Discount App is vulnerable to override, arbitrary user login and denial of service vulnerabilities, which allow attackers to log in to other users' systems and perform unauthorized operations by grabbing packets and modifying cell phone...

Touhou Shared Bike Android App Has Logic Design Flaws

TouTou Shared Bike Android APP is a shared bike travel software for cities. A logical design vulnerability exists in TouTou Shared Bicycle Android APP. An attacker can log in to any user account and perform unauthorized operations by grabbing packets and blasting CAPTCHA...

PCG Travel Android App Has Logic Design Flaws

PCG Travel Android APP is a B2B2C travel service platform. PCG Travel Android APP has a logical design vulnerability. After registering, an attacker can reset any account password by grabbing packets to bypass the CAPTCHA through the forgot password function...

Vivo Bike Share Android App Has Logic Design Flaws

Vivo Bike Share Android APP is a bike sharing rental software. There is a logic design vulnerability in Vivi Bike Sharing Android APP. Attackers can register any account by grabbing packets and blasting CAPTCHA...

Denial of Service Vulnerability in DZF App

DZF APP is an investment platform that focuses on providing online financial services. A denial-of-service vulnerability exists in DZF APP, as the program fails to limit the number of times SMS can be sent, an attacker can consume server resources and cause a denial of service by sending unlimite...

Speedmaster Mom and Pop App has SMS Bombing Vulnerability

Speed Maternity App is a shopping application platform for maternity and baby products. There is an SMS bombing vulnerability in the lucky draw section of the Speed Maternity and Baby APP, where an attacker can obtain a specified prize by modifying the function of the prize ID, and consume server...

Logic design flaws in the Journey Dot Dot Dot app

Journey dot app is a train travel service software. A logical design vulnerability exists in the JourneyPoint app. An attacker can register any account, reset any password and perform unauthorized operations by capturing packets and blasting CAPTCHA...

Forbidden Horse Travel App has a logic design flaw

The Forbidden Horse Mobility App is a cell phone application for sharing motorcycles. There is a logic design loophole in Foramar Mobility APP, which allows attackers to arbitrarily register users or steal other users' account information for picking up a bike by grabbing packets and bursting...

Aier Eye Group's Eye Neighborhood Doctor's Edition App for Android Has Logic Design Flaws

Eye Neighborhood Doctor Edition App is an application designed and developed for ophthalmologists and ophthalmology practitioners. The Android version of Eye Neighborhood Doctor Edition APP of Aier Ophthalmology Group has a logic design vulnerability, which allows attackers to successfully regist...

MantisBT Security Bypass Vulnerability (CNVD-2017-33719)

MantisBT is a Web-based open source defect tracking system of the MantisBT team . The system provides project management and defect tracking services in the form of Web operations. A security vulnerability exists in versions of MantisBT prior to 1.2.19. An attacker can exploit the vulnerability t...

CVE-2014-9624

CAPTCHA bypass vulnerability in MantisBT before 1.2.19...

CVE-2014-9624

CAPTCHA bypass vulnerability in MantisBT before 1.2.19...

Design/Logic Flaw

CAPTCHA bypass vulnerability in MantisBT before 1.2.19...

CVE-2014-9624

CVE-2014-9624 affects MantisBT versions earlier than 1.2.19, where a CAPTCHA bypass vulnerability exists. Multiple sources (CNVD-2017-33719, UB Ubuntu CVE page, NVD entry) describe that an attacker can bypass CAPTCHA testing by obtaining unlimited CAPTCHA samples with perturbations for the same c...

CVE-2014-9624

CAPTCHA bypass vulnerability in MantisBT before 1.2.19...

Ringtone Duo App Has Denial of Service Vulnerability

Ringtone Duo APP is a cell phone ringtone downloader. Ringtone Duo APP suffers from a denial-of-service vulnerability, where an attacker consumes server resources and causes a denial-of-service by sending unlimited CAPTCHAs to cell phones...

simple-php authentication bypass vulnerability

simple-php-captcha is a PHP-based CAPTCHA script. A security vulnerability exists in simple-php-captcha commit 2015-08-31 and earlier versions. A remote attacker can exploit the vulnerability to automatically generate CAPTCHA responses...

CVE-2015-6250

simple-php-captcha before commit 9d65a945029c7be7bb6bc893759e74c5636be694 allows remote attackers to automatically generate the captcha response by running the same code on the client-side...

Code injection

simple-php-captcha before commit 9d65a945029c7be7bb6bc893759e74c5636be694 allows remote attackers to automatically generate the captcha response by running the same code on the client-side...