悟空CRM无需任何权限的SQL注入漏洞2（ThinkPHP特性）

简要描述： 一个没有权限控制的类，正好又有注入 （给L.N.添堵系列之三） 另外厂商分给高点呗，别这么小气本来不想挖了的。 详细说明： /App/Lib/Mobile/LogMobile.class.php 这个类没有权限验证（initialize方法）哦 看到edit函数： //修改沟通日志 public function edit if$this-isPost $id = isset$POST'id' ? intval$POST'id' : 0; $params = jsondecode$POST'params',true; if!isarray$params...

Sleep Bug Kids Lite - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sleep Bug Kids Lite published at the 'play' market has multiple vulnerabilities...

Lullaby Pony Sleep - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Lullaby Pony Sleep published at the 'play' market has multiple vulnerabilities...

Baby Sleep - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Baby Sleep published at the 'play' market has multiple vulnerabilities...

Sleep Music and Sounds - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Sleep Music and Sounds published at the 'play' market has multiple vulnerabilities...

Healthy Sleep Diary - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Healthy Sleep Diary published at the 'play' market has multiple vulnerabilities...

Deep Sleep and Relax Hypnosis - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Deep Sleep and Relax Hypnosis published at the 'play' market has multiple vulnerabilities...

Forest Sounds Nature To Sleep - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Forest Sounds Nature To Sleep published at the 'play' market has multiple vulnerabilities...

Sleep Tight Night Light - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Sleep Tight Night Light published at the 'play' market has multiple vulnerabilities...

Sleep Diary Lite - Corrupted files, Dangerous filesystem permissions, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Sleep Diary Lite published at the 'play' market has multiple vulnerabilities...

Sounds for Baby Sleep Music - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sounds for Baby Sleep Music published at the 'play' market has multiple vulnerabilities...

Nature Sounds Relax and Sleep - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Nature Sounds Relax and Sleep published at the 'play' market has multiple vulnerabilities...

Relax and Sleep for everyone - Base64 encoded String, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Relax and Sleep for everyone published at the 'play' market has multiple vulnerabilities...

Sleep Calculator - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sleep Calculator published at the 'play' market has multiple vulnerabilities...

Meditation relax music sleep - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Meditation relax music sleep published at the 'play' market has multiple vulnerabilities...

Relax Meditation: Sleep Sounds - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Relax Meditation: Sleep Sounds published at the 'play' market has multiple vulnerabilities...

Sleep Cycle alarm clock - Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Sleep Cycle alarm clock published at the 'play' market has multiple vulnerabilities...

Code injection

The WNM Sleep Mode code in wpasupplicant 2.x before 2.6 does not properly ignore key data in response frames when management frame protection MFP was not negotiated, which allows remote attackers to inject arbitrary broadcast or multicast packets or cause a denial of service ignored packets via a...

CVE-2015-5310

The WNM Sleep Mode code in wpasupplicant 2.x before 2.6 does not properly ignore key data in response frames when management frame protection MFP was not negotiated, which allows remote attackers to inject arbitrary broadcast or multicast packets or cause a denial of service ignored packets via a...

DEBIAN-CVE-2015-5310

The WNM Sleep Mode code in wpasupplicant 2.x before 2.6 does not properly ignore key data in response frames when management frame protection MFP was not negotiated, which allows remote attackers to inject arbitrary broadcast or multicast packets or cause a denial of service ignored packets via a...