Overstepping Access Vulnerability in China Postal Express App

CPSE APP is a 24-hour courier self-service courier software. An override access vulnerability exists in China Post Express & Easy APP. The attacker obtains other users' information by grabbing packets and intercepting modifications...

Bractus SunTrack Multiple XSS

Vendor: Bractus http://bract.us Product: SunTrack http://bract.us/demo/login.jsp Multiple stored XSS vulnerabilities exist in the Bractus SunTrack courier software suite. Affected scripts: newprofile.html title parameter signup/signup.html firstname, lastname, company parameter contact.html...