Vendor Response

This is a screenshot of the confirmation by the BeeCloud Company for the design vulnerability. They acknowledged the logic vulnerability we discovered is fatal. And thanks to our findings, they have fixed the problems.

This is a screenshot of the confirmation from the developer of the app named OffPhone for the implementation vulnerabilities. They acknowledged the vulnerability is critical and told us they were planing to close the old version with the vulnerability and suggesting users update the app to the latest version for security.

This is a screenshot of the confirmation from the developer of the app named Clear for an implementation vulnerabilities. They thanked to us for reporting the vulnerability to them and acknowledged it is critical. They will fix it in the next version.