65 matches found
Shanghai Jumo Information Technology Co., Ltd. radish borrowing APP has information leakage vulnerability
Radish Borrowing APP is a small borrowing money fast installment loan software. Shanghai Jumo Information Technology Co. Radish Borrowing APP has information leakage vulnerability. Attackers can register any account and reset any password by grabbing packets to get verification code...
Logic design flaws in Direct Marketing Mastermind App
The Direct Marketing Everything App is a live streaming platform that focuses on education and training. There is a logic design vulnerability in the Direct Marketing Master App. Attackers can log into other people's accounts and obtain sensitive information by grabbing packets to obtain...
Rimet Wifi Smart Temperature Control Android APP is vulnerable to reset arbitrary account passwords
Rimet Wifi Smart Temperature Control Android APP is a management platform for smart hardware devices. Rimet Wifi Android APP is vulnerable to reset any account password. Attackers can reset any password and enter the device management interface to remotely operate various temperature control, gas...
Top Smart Android APP has logic design flaws
Top Smart Android APP is a marketing management software for the majority of users. The software can help users keep abreast of information developments and activities in the smart home industry. There is a logic design vulnerability in Top Smart Android APP. Attackers can log in to any account b...
Cloud Energy App has SMS Bombing Vulnerability
Cloud Energy App is a software about car rental service. There is an SMS bombing vulnerability in Cloud Energy App. An attacker can exploit the vulnerability to replay packets sending verification codes without restriction and bombard the client with SMS...
Arbitrary Account Registration and Password Reset Vulnerabilities in Tea Merchant APP
Tea Merchant APP is a software specialized in serving tea merchants. Tea Merchant APP has arbitrary account registration and password reset vulnerabilities. Attackers can register any account and reset any password by capturing packets and bursting the verification code...
Men's Health App Has Arbitrary User Login Vulnerability
Men's Health App is a men's health support tool app. There is an arbitrary user login vulnerability in Men's Health APP. Attackers can login to any account registration by grabbing packets to get the verification code...
Honey Raccoon Live App has multiple vulnerabilities
Honey Raccoon Live App is a live streaming platform for real people. There are arbitrary user registration and arbitrary password reset vulnerabilities in Honey Raccoon Live APP. Attackers can register any account and reset any password by grabbing packets to get the verification code...
Any Account Registration and Any Password Reset Vulnerabilities Exist in Anxiety Companion App
Anxious companion APP is a companion O2O service platform. There are arbitrary account registration and arbitrary password reset vulnerabilities in Anxin escort APP. Attackers can register any account and reset any password by capturing the verification code...
4S Circle App has arbitrary account registration vulnerability
4S Circle APP is a handheld tool that connects 4S stores and used car trading. 4S Circle APP has an arbitrary account registration vulnerability. Attackers can register any account by grabbing packets to get the verification code...
Logic design flaws in DXN Global App
Dresdner Global App is a shopping software. There is a logical design vulnerability in the DXGlobal APP. An attacker can register any account, reset any password and change the payment amount by obtaining the verification code...
Fast Teeth App Has Logic Design Flaws
Fast Teeth APP is a cell phone transfer software. There is a logical design vulnerability in Fast Teeth APP. Attackers can register any account by grabbing packets and blasting the verification code...
Multiple Vulnerabilities in LaneCat Intranet Security Management System Vulnerabilities
LaneCat is a carrier-grade Internet behavior management system launched by Xiamen Chengchuang Technology Co. LaneCat intranet security management system has denial of service and SQL injection vulnerabilities, attackers can send unlimited verification codes to cell phones to consume server...
Mai Dot Mall App has SMS Bombing Vulnerability
MacDot Mall APP is an online shopping software. There is a SMS bombing vulnerability in MaiDot Mall APP. The attacker consumes server resources and causes denial of service by sending unlimited CAPTCHAs to cell phones...
The Hutchison App has a logical design flaw
HeSeries is a comprehensive mobile service app developed by Chengdu HeSeries Network Technology Co. There is a logic design vulnerability in the HeSeries app. An attacker can log in to any account and reset any registered user's password by blasting the registration verification code and password...
Sharing Premium App Has Logic Design Flaws
Shared Premium APP is a mobile software that focuses on saving money on online shopping. Sharing Premium APP has a logical design loophole, the attacker can arbitrarily register users and arbitrarily reset passwords by grabbing packets and bursting verification codes...
Logic design flaws in BMS CRM APP
CRM APP is a mobile sales customer management platform developed by Xiamen Ruipu Software Technology Co. CRM APP has a logical design loophole, the attacker forgets the password function to capture the packet to obtain the verification code, you can arbitrarily register users and reset any passwo...
Denial of Service Vulnerability in Wireless Suzhou APP Registry
Wireless Suzhou APP is the "Internet +" city life application software created by Suzhou Radio and TV Station Group. A denial of service vulnerability exists in the registration of Wireless Suzhou APP, which allows an attacker to send unlimited verification codes to a cell phone, consuming server...
Logic design flaws in the Android version of Eye Neighborhood App of Aire Eye Group
Eye Neighborhood APP is an all-round eye health management application, which monitors your eye health anytime and anywhere, consults with professional ophthalmologists online, and connects with offline eye health medical products to provide users with professional checkups and treatment services...
Denial of Service Vulnerability in EZZY APP for Android
EZZY APP is a car intelligent sharing platform APP created by Beijing Daimeng Technology Co. A denial of service vulnerability exists in the Android version of EZZY APP, which allows an attacker to traverse a cell phone number and consume server resources by sending an unlimited number of...