EUVD-2014-5883

Malware in sbrugna...

EUVD-2024-53470

Malicious code in bioql PyPI...

CVE-2024-56964

An issue in Che Hao Duo Used Automobile Agency Beijing Co., Ltd Guazi Used Car iOS 10.15.1 allows attackers to access sensitive user information via supplying a crafted link...

Guazi Used Car 安全漏洞

Guazi Used Car 瓜子二手车 is a used car software from the Chinese company Guazi 瓜子. A security vulnerability exists in Guazi Used Car iOS version 10.15.1, which originates from an attacker being able to obtain sensitive user information by providing a carefully crafted link...

PT-2025-3365 · Unknown · Guazi Used Car

Name of the Vulnerable Software and Affected Versions: Guazi Used Car iOS version 10.15.1 Description: The issue allows attackers to access sensitive user information by supplying a crafted link. This enables unauthorized access to confidential user data. Recommendations: For Guazi Used Car iOS...

CVE-2024-56964

An issue in Che Hao Duo Used Automobile Agency Beijing Co., Ltd Guazi Used Car iOS 10.15.1 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56964

An issue in Che Hao Duo Used Automobile Agency Beijing Co., Ltd Guazi Used Car iOS 10.15.1 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56964

CVE-2024-56964 affects Guazi Used Car iOS 10.15.1. The connected sources indicate that an attacker can access sensitive user information by supplying a crafted link, implying a vulnerability in how links trigger data exposure. The base CVSS metrics in the Initial document show a Medium severity (...

Automotive Shop Management System Cross-Site Scripting Vulnerability (CNVD-2022-77486)

Automotive Shop Management System is a system with customer management, vehicle sales, parts sales, repair and maintenance, agency services, auto credit, auto leasing, used car trading, and performance management functions. xss vulnerability exists in Automotive Shop Management System v1.0. An...

Arbitrary File Deletion Vulnerability in simcms us***.php File

simcms is a solution for used car website based on PHP+MYSQL. The simcms us.php file has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files...

Cross-site scripting vulnerability in simcms (CNVD-2020-70840)

simcms is a solution for used car website based on PHP+MYSQL. A cross-site scripting vulnerability exists in simcms. An attacker can exploit the vulnerability to obtain sensitive information such as user cookies...

DaQuanZhouAuto.com PHP website program suffers from SQL injection vulnerability.

DaQuanZhouCar.com PHP whole site program is a used car publishing website developed by PHP+MySQL. DaQuanZhouAuto.com PHP whole site program has SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

When Your Used Car is a Little Too ‘Mobile’

Many modern vehicles let owners use the Internet or a mobile device to control the car's locks, track location and performance data, and start the engine. But who exactly owns that control is not always clear when these smart cars are sold or leased anew. Here's the story of one former electric...

Youxin Used Car App Has Logic Design Flaws

Youxin Used Car APP is a cell phone used car information buying service software. There is a logical design vulnerability in Ushin Used Car APP. Attackers can bombard the client with SMS messages by replaying packets that send CAPTCHA without restriction...

Used Car Home App Has SMS Bombing Vulnerability

Used Car Home App is a mobile application platform that helps users to buy and sell used cars. The Used Car House APP version 6.1.4 suffers from an SMS bombing vulnerability that allows an attacker to traverse a cell phone number and consume server resources and cause a denial of service by sendi...

porscheofstratham.com XSS vulnerability

Open Bug Bounty ID: OBB-436233 Description| Value ---|--- Affected Website:| porscheofstratham.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

DEKRA Used Car Report - Customized SSL, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application DEKRA Used Car Report published at the 'play' market has multiple vulnerabilities...

CVE-2014-5996

The DEKRA Used Car Report aka com.dekra.maengelreport application 3.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The DEKRA Used Car Report aka com.dekra.maengelreport application 3.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5996

CVE-2014-5996 affects the Android app “DEKRA Used Car Report” (com.dekra.maengelreport) version 3.0.0, where X.509 certificate validation is not performed for SSL connections. This allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The vulnerability...