1270 matches found
CVE-2015-5916: Exposure of Sensitive Information to an Unauthorized Actor
The Apple Pay component in Apple iOS before 9 allows remote terminals to obtain sensitive recent-transaction information during payments by leveraging the transaction-log feature...
Apple Addresses Dozens of Vulnerabilities, Embraces Two-Factor Authentication in iOS 9
Apple pushed out iOS 9 Wednesday, addressing a cornucopia of vulnerabilities, including bugs that could lead to arbitrary code execution, credential leakage, and interface spoofing among other issues. But conspicuously absent from the update however is a fix for the vulnerability in AirDrop that...
Apple iOS < 9.0 Multiple Vulnerabilities
Binary data appleios90check.nbin...
China Telecom's Wing Pay App Has Multiple Vulnerabilities
Wing Pay is the business brand of China Telecom that operates payment and internet finance. Wing Pay APP 3.9.6 has multiple security vulnerabilities, including: global file read/write vulnerability; configuration file read/write vulnerability; trust arbitrary security certificate vulnerability;...
How Apple Pay Can Be Hacked to Steal Your Credit Card Details
Today anywhere you go, you will come across Free or Public WiFi hotspots -- it makes our travel easier when we stuck without a data connection. Isn’t it? But, I think you’ll agree with me when I say: This Free WiFi hotspot service could bring you in trouble, as it could be a bait set up by hacker...
CmsEasy最新版5.5 存储型XSS导致GetShell
简要描述： n处XSS，我不信都插完打不到cookie，get不了shell -.- 详细说明： 第一处（只代码审计第一处，后面几处类似。都是没有过滤）： function loginfalse cookie::set'loginfalse',int cookie::get'loginfalse'+1,time+3600; event::log'loginfalse','失败 user='.front::post'username'; front::flashlang'登陆失败！'."".lang'backuppage'."";...
Information disclosure
The Gulf Power Mobile Bill Pay aka com.tionetworks.gulf application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6903
The CVE-2014-6903 entry corresponds to the Gulf Power Mobile Bill Pay Android app (com.tionetworks.gulf) failing to verify X.509 certificates from SSL servers. This disables proper TLS certificate validation, enabling man-in-the-middle attackers to spoof servers and capture sensitive data via a c...
CVE-2014-6903
The Gulf Power Mobile Bill Pay aka com.tionetworks.gulf application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6903: Undefined Security Weakness
The Gulf Power Mobile Bill Pay aka com.tionetworks.gulf application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
PT-2014-7579
Name of the Vulnerable Software and Affected Versions Gulf Power Mobile Bill Pay application version 1 for Android Description The issue concerns the application's failure to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive...
Dennis Fisher and Mike Mimoso Discuss All Things Apple Security, Home Depot and Microsoft
Dennis Fisher and Mike Mimoso talk abut the crazy news of the last couple of weeks, the Apple privacy and Apple Pay announcements, the details of the Home Depot breach and the end of the Microsoft Trustworthy Computing unit. Download: digitalunderground167.mp3 Music by Chris Gonsalves...
Rich Mogull on Apple Pay
Dennis Fisher talks with Rich Mogull about the new iPhone 6, the security and privacy of Apple Pay and whether there’s another company that could put together a similar payment system. Download: digitalunderground166.mp3 Music by Chris Gonsalves...
CVE-2014-5867
The Capital One Spark Pay aka com.capitalone.sparkpay application 0.9.81 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5867
CVE-2014-5867 concerns the Capital One Spark Pay Android app (com.capitalone.sparkpay) version 0.9.81, where the SSL implementation does not verify X.509 certificates. The root cause is failure to validate server certificates, which enables man-in-the-middle attackers to spoof servers and potenti...
PT-2014-6852
Name of the Vulnerable Software and Affected Versions Capital One Spark Pay application version 0.9.81 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates fr...
CVE-2014-5867: Undefined Security Weakness
The Capital One Spark Pay aka com.capitalone.sparkpay application 0.9.81 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Apple Pay: A New Way to Pay
Every September, Apple announces exciting new products that promise to change how we interact with not only our devices, but with the world around us. 2014 has been no exception; in San Francisco this morning, Apple announced the iPhone 6, Apple Watch and Apple Pay. Even though Im excited about t...
Fast payment and some credit card functions whether there is a defect? Know Bank card number and Expiration Date can consumer-vulnerability warning-the black bar safety net
Someone once broke a credit card just know the card number and expiration date on the CAN in some of the website on any purchase, while various payment products such as tenpay, Alipay launched fast pay only need to provide Bank card number, ID number, name, and phone number can be opened fast...
