Website Glitch Let Me Overstock My Coinbase

Coinbase and Overstock.com just fixed a serious glitch that allowed Overstock customers to buy any item at a tiny fraction of the listed price. Potentially more punishing, the flaw let anyone paying with bitcoin reap many times the authorized bitcoin refund amount on any canceled Overstock orders...

flex.work.life Improper Access Control vulnerability

Open Bug Bounty ID: OBB-501269 Description| Value ---|--- Affected Website:| flex.work.life Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N...

Cross site scripting

Invoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within the invoice creation page, which can result in disruption of service and execution of javascript code...

CVE-2017-1000466

Invoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within the invoice creation page, which can result in disruption of service and execution of javascript code...

CVE-2017-1000466

Invoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within the invoice creation page, which can result in disruption of service and execution of javascript code...

CVE-2017-1000466

Invoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within the invoice creation page, which can result in disruption of service and execution of javascript code...

CVE-2017-1000466

CVE-2017-1000466 concerns Invoice Ninja v3.8.1, where a stored cross-site scripting (XSS) vulnerability exists on the invoice creation page. The underlying issue is embedded script execution triggered by user-supplied content, enabling potential disruption of service and JavaScript execution with...

Invoice Ninja Cross-Site Scripting Vulnerability

Invoice Ninja is an open source financial system. The system is able to provide invoicing, collection and other functions. A cross-site scripting vulnerability exists in the invoice creation page in Invoice Ninja version 3.8.1. A remote attacker can exploit this vulnerability to cause a denial of...

CVE-2017-1000466: Improper Neutralization of Input During Web Page Generation

Invoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within the invoice creation page, which can result in disruption of service and execution of javascript code...

Threat Outbreak Alert RuleID31671: Email Messages Distributing Malicious Software on December 25, 2017

Medium Alert ID: 56328 First Published: 2018 January 2 12:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31671 may contain the following files: Name |...

Threat Outbreak Alert RuleID31644: Email Messages Distributing Malicious Software on December 15, 2017

Medium Alert ID: 56280 First Published: 2017 December 15 17:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31644 may contain the following files: Name |...

Threat Outbreak Alert RuleID31632: Email Messages Distributing Malicious Software on December 15, 2017

Medium Alert ID: 56275 First Published: 2017 December 15 15:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31632 may contain the following files: Name |...

Invoice – BizXpert - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Invoice – BizXpert published at the 'play' market has multiple vulnerabilities...

Cloudflare: Cloudflare does not sufficiently truncate credit card numbers in invoices

When a Cloudflare user has a paid account, but Cloudflare can't process the user's credit card, Cloudflare emails the user from [email protected], subject line "Cloudflare Failed Taking Payment for INV-D1234567". The email contains an attachment, "2017-11-19CloudflareINV-D1234567.pdf", a PDF...

Threat Outbreak Alert RuleID31357: Email Messages Distributing Malicious Software on November 20, 2017

Medium Alert ID: 55981 First Published: 2017 November 20 16:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31357 may contain the following files: Name |...

Threat Outbreak Alert RuleID31178: Email Messages Distributing Malicious Software on November 1, 2017

Medium Alert ID: 55748 First Published: 2017 November 1 15:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31178 may contain the following files: Name |...

NS Download Shop Component SQL Injection Vulnerability in Joomla!

Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other functions. NS Download Shop also known as comnsdownloadshop component is used in one of the download component. A SQL injection...

Php Inventory Arbitrary File Upload Vulnerability

Php Inventory&Invoice Management System is a sales management system. The system features inventory management, invoice management and user management. An arbitrary file upload vulnerability exists in Php Inventory&Invoice Management System. An attacker can exploit this vulnerability to upload...

Design/Logic Flaw

Php Inventory & Invoice Management System allows Arbitrary File Upload via dashboard/editmyaccountdetail/...

CVE-2017-15990

CVE-2017-15990 affects the Php Inventory & Invoice Management System, where an arbitrary file upload is possible via the path dashboard/edit_myaccountdetail/. The connected documents consistently describe an arbitrary file upload vulnerability in this software, with multiple references (NVD entry...