CVE-2023-42820

JumpServer is an open source bastion host. This vulnerability is due to exposing the random number seed to the API, potentially allowing the randomly generated verification codes to be replayed, which could lead to password resets. If MFA is enabled users are not affect. Users not using local...

Guangzhou Travel Ease App has SMS Bombing Vulnerability

Guangzhou Travel Easy APP is an information service and online business processing software launched to the public by Guangzhou Public Security Traffic Management Department. There is an SMS bombing vulnerability in Guangzhou Easy Travel APP. An attacker can exploit this vulnerability to replay...

loveU dating app has SMS bombing vulnerability

loveU Matchmaking Dating APP is a real-name matchmaking dating software. There is an SMS bombing vulnerability in loveU dating APP. An attacker can exploit the vulnerability to replay the packets sending verification code without limitation and bombard the client with SMS...