133 matches found
michiganlottery.com XSS vulnerability
Vulnerable URL: https://www.michiganlottery.com/v1/milotto/players/retailer/lookup.json?acceptscredit=0keno=0=5=0=0togo=0=32.7787='%22%26%25prompt/OPENBUGBOUNTY/...
Man gets 25 years for hacking lottery computers and winning $2.2 million
By Waqas In April 2015, it was reported that Eddie Raymond Tipton, This is a post from HackRead.com Read the original post: Man gets 25 years for hacking lottery computers and winning $2.2 million...
Insider Attack on Lottery Software
Eddie Tipton, a programmer for the Multi-State Lottery Association, secretly installed software that allowed him to predict jackpots. What's surprising to me is how many lotteries don't use real random number generators. What happened to picking golf balls out of wind-blown steel cages on...
lottery.co.uk XSS vulnerability
Vulnerable URL: https://www.lottery.co.uk/images/banners/postcode-lottery-top.swf?clickTag=http://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 87996 VIP website...
biglotteryfund.org.uk XSS vulnerability
Open Bug Bounty ID: OBB-219416 Description| Value ---|--- Affected Website:| biglotteryfund.org.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Threat Outbreak Alert RuleID23808: Email Messages Distributing Malicious Software on July 12, 2016
Medium Alert ID: 47063 First Published: 2016 July 13 13:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23808 may contain the following files: Name | Siz...
affiliates.healthlottery.co.uk XSS vulnerability
Vulnerable URL: http://affiliates.healthlottery.co.uk/processing/profilerotator.asp?pid=%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 31.10.2016 Latest check for patch:| 31.10.2016 15:58 GMT Vulnerability type:| XSS Vulnerabili...
Lotto die Zahlen - Dynamic Code Loading, External URLs, MIT license vulnerabilities
HackApp vulnerability scanner discovered that application Lotto die Zahlen published at the 'play' market has multiple vulnerabilities...
Lottery numbers manager - Exported components, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Lottery numbers manager published at the 'play' market has multiple vulnerabilities...
6 Charged for Hacking Lottery Terminals to Produce More Winning Tickets
Police have arrested and charged six people with crimes linked to hacking Connecticut state lottery terminals in order to produce more winning tickets than usual. Prosecutors say all the six suspects are either owners or employees of retail stores that produced a much higher number of winning...
coloradolottery.com XSS vulnerability
Vulnerable URL: https://www.coloradolottery.com/modules/jackpot/payoutPrint.cfm?gamename=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:31 GMT Vulnerability type:| XSS Vulnerability status:|...
At least one into the subject of mobile software vulnerabilities, some companies to grab the market does not consider security 9 0 after hacks said the hand tour“9 9% has a vulnerability” insiders suggested that the state of mobile software development of a unified standard of review-vulnerability warning-the black bar safety net
“It is a problem of the APP.” Xuhui Public Security Bureau network security detachment Bob Sergeant, record this phone the name of the software and is the“Black”of the symptoms. This is Bob the police officer and his colleagues made an experiment: they selected a certain influence of mobile phone...
CVE-2014-5703
The Slingo Lottery Challenge aka com.slingo.slingolotterychallenge application 1.0.34 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The Slingo Lottery Challenge aka com.slingo.slingolotterychallenge application 1.0.34 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5703
The CVE-2014-5703 entry concerns the Android app Slingo Lottery Challenge (com.slingo.slingolotterychallenge) version 1.0.34. Affected component: SSL/TLS certificate validation in the app’s network trust handling. Root cause: the application does not verify X.509 certificates from SSL servers, en...
CVE-2014-5703
The Slingo Lottery Challenge aka com.slingo.slingolotterychallenge application 1.0.34 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5657
The CA Lottery Results aka com.matcho0.calotto application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5568
The Las Vegas Lottery Scratch Off aka com.androkera.lottery application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The Las Vegas Lottery Scratch Off aka com.androkera.lottery application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The CA Lottery Results aka com.matcho0.calotto application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...