Arbitrary Account Registration and Password Reset Vulnerabilities in Tea Merchant APP

Tea Merchant APP is a software specialized in serving tea merchants. Tea Merchant APP has arbitrary account registration and password reset vulnerabilities. Attackers can register any account and reset any password by capturing packets and bursting the verification code...

Arbitrary User Registration Vulnerability in Healthcare Hospital App

Jianqi Hospital APP is a health service APP which integrates various forms of services such as "Ask Doctor + Self-diagnosis + Online Drug Purchase" and so on. There is an arbitrary user registration vulnerability in Jianke Hospital APP. Attackers can register any account by capturing packets and...

Best Clinical Practice App Has Arbitrary Registration Account and Arbitrary Password Reset Vulnerabilities

The Best Clinical Practice App is an application designed to provide medical practitioners with knowledge of diagnosis and treatment during clinical practice and learning. The Best Clinical Practice APP is vulnerable to arbitrary account registration and arbitrary password reset. An attacker can...

Multiple Vulnerabilities in Photo Composer App

Picture Synthesizer APP is a picture synthesizer mobile software. Picture Synthesizer APP has arbitrary account registration and arbitrary password reset vulnerabilities. An attacker can register any account and reset any password by grabbing packets to get the verification code...

Dictionary of Medicine App is vulnerable to arbitrary account registration

Pharmaceutical Dictionary APP is a Chinese-English translation dictionary software for medical, pharmaceutical and other professionals under Medical Pulse. There is a logical design vulnerability in Dictionary of Medicine APP. An attacker can register any account by grabbing packets to get the...

Dual Opening Assistant App has a logical design flaw

Double Open Assistant APP is a game assistance application. There is a logical design vulnerability in Dual Open Assistant APP. Attackers can arbitrarily register users and reset arbitrary passwords by capturing packets to obtain verification codes...

TCP Stream Replay Tool: TCPCopy

Although the real live flow is important for the test of Internet server applications, it is hard to simulate it as online environments are too complex. To support more realistic testing of Internet server applications, we develop a live flow reproduction tool – TCPCopy, which could generate the...

Arbitrary Account Password Reset Vulnerability in the Android Version of China Machine Car APP

CAMC APP is an electric vehicle time-share rental program carried out by Beijing CAMC New Energy Vehicle Leasing Co. There is an arbitrary account password reset vulnerability in the Android version of CAMC APP. Attackers can reset the account password by grabbing packets, resulting in account...

Microbus App for Android suffers from an override access vulnerability

Microbus is a mobile application that integrates the functions of bus inquiry, mobile payment for tickets, bus parking site navigation, and real-time bus operation information view. The Android version of the Microbus app has an overstepping access vulnerability that allows an attacker to log in ...

The Ten Billion Dollar Alliance App Has a Logic Design Flaw

Ten Billion Affiliate App is a service platform that gives users rebate offers. Tianyi Union App has a logical design vulnerability, attackers can register any account and reset any account password by grabbing packets...

Arbitrary Password Reset Vulnerability in Xikai Gold Service App

Xikai Gold App is a professional investment and financial management software. Xikai Gold App has any password reset vulnerability, attackers can successfully register any account and reset any account password by grabbing packets...

Arbitrary Password Reset Vulnerability in Timeshow App

Times Show App is a software that integrates many functions such as topics, beautiful pictures, hot shows, friends, stickers, points, exchange goods and so on. The vulnerability is caused by a password reset vulnerability, which allows an attacker to register any user and reset any password by...

Windows Packet Divert: WinDivert

Windows Packet Divert WinDivert is a user-mode packet capture-and-divert package for Windows Vista, Windows 2008, Windows 7, Windows 8 and Windows 10. WinDivert allows usermode programs to capture/modify/drop network packets sent to/from the Windows network stack. In summary, WinDivert can captur...

Transit line app has logic design flaws

Bus Line App is a mobile bus software that allows you to check real-time arrival information of city buses and check bus routes. There is a logical design vulnerability in Bus Line App, which allows attackers to register users and reset their passwords arbitrarily by grabbing packets...

Public Transportation eTraffic App Has Logic Design Flaws

Bus eLutong is a free smartphone-based real-time bus information query software officially released by Beijing Public Transportation Group. There is a logical design vulnerability in Bus eLutong App, which allows an attacker to arbitrarily register a user and reset any user's password by grabbing...

Touhou Shared Bike Android App Has Logic Design Flaws

TouTou Shared Bike Android APP is a shared bike travel software for cities. A logical design vulnerability exists in TouTou Shared Bicycle Android APP. An attacker can log in to any user account and perform unauthorized operations by grabbing packets and blasting CAPTCHA...

Xin Online APP has logic design flaws

XIN ONLINE APP is a mobile home search software that integrates the functions of second-hand house, rental house and new house. Xin Online APP has a logical design vulnerability. Attackers can register any user and reset any password by grabbing packets to get the verification code through the...

Vivo Bike Share Android App Has Logic Design Flaws

Vivo Bike Share Android APP is a bike sharing rental software. There is a logic design vulnerability in Vivi Bike Sharing Android APP. Attackers can register any account by grabbing packets and blasting CAPTCHA...

PCG Travel Android App Has Logic Design Flaws

PCG Travel Android APP is a B2B2C travel service platform. PCG Travel Android APP has a logical design vulnerability. After registering, an attacker can reset any account password by grabbing packets to bypass the CAPTCHA through the forgot password function...

Beauty Assistant App Has Logic Design Flaws

Beauty Assistant APP is a retouching software. There is a logical design vulnerability in Beauty Assistant APP. Attackers can register any account by grabbing packets and blasting CAPTCHA...