Back to directory

WRITEUP #2694

Vulnerability in Huawei's AppGallery can download paid apps for free

Logic BugPayment bypassLogic flaw

by@evowizz(Dylan Roussel)

Program

Huawei

Published

May 18, 2022

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://evowizz.dev/blog/huawei-appgallery-vulnerability

▸ RELATED WRITEUPS

Logic Flaw: I Can Block You from Accessing Your Own Account

Logic BugLogic flaw

“Like” Bypass on Customer Reviews — €500 bounty

Logic BugLogic flaw

Race Condition About The User Version and Ignored

Race ConditionPayment bypass

Interesting Business Logic Error leads to Pre-Account Takeover via Verification bypass on GoogleVRP

Auth BypassAccount takeover

Built with ❤️ by Shubham Rawat