Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
Avoid the Hack! :donor: (avoidthehack@infosec.exchange)'s status on Friday, 15-Nov-2024 01:51:27 JST Avoid the Hack! :donor:

Pregnancy Tracking #App ‘What to Expect’ Refuses to Fix Issue that Allows Full Account Takeover
What to Expect is a popular pregnancy tracking app available for #ios and #android.
An exposed API endpoint handling password reset requests for the app does not require authentication or enforce rate limits and is vulnerable to brute force attacks.
#privacy #security #cybersecurity
https://www.404media.co/pregnancy-tracking-app-what-to-expect-refuses-to-fix-issue-that-allows-full-account-takeover-2/
In conversation about 7 days ago from infosec.exchange permalink
Attachments
1. Domain not in remote thumbnail source whitelist: www.404media.co
  
  Pregnancy Tracking App ‘What to Expect’ Refuses to Fix Issue that Allows Full Account Takeover
  
  from @josephfcox
  
  Vulnerabilities in the popular What to Expect app include one that allows a full account take over, and another that exposes that email address of forum admins.

Feeds