2774 matches found
PayPal GoToMaxx PDFMailer - Local Overflow Vulnerability
Document Title: =============== PayPal GoToMaxx PDFMailer - Local Overflow Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1274 http://www.vulnerability-lab.com/getcontent.php?id=940 Video: https://www.youtube.com/watch?v=IXhwfZV6x0M Release Date:...
PayPal GoToMaxx PDFMailer - Local Overflow Vulnerability
Document Title: =============== PayPal GoToMaxx PDFMailer - Local Overflow Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1274 http://www.vulnerability-lab.com/getcontent.php?id=940 Video: https://www.youtube.com/watch?v=IXhwfZV6x0M Release Date:...
PayPal Inc BB #74 - Persistent Core Backend Vulnerability
Document Title: =============== PayPal Inc BB 74 - Persistent Core Backend Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1278 PayPal Inc Security UID: cDc49dT Vulnerability Magazine Article:...
PayPal Inc BB #74 - Persistent Core Backend Vulnerability
Document Title: =============== PayPal Inc BB 74 - Persistent Core Backend Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1278 PayPal Inc Security UID: cDc49dT Vulnerability Magazine Article:...
PayPal Fixes Serious Account Hijacking Bug in Manager
PayPal patched a hole in its Manager portal this week that could have made it easy for an attacker to hijack an admin’s account, change their password and steal their personal information — not to mention their savings. Manager is a feature of the service that allows users to manage their Payflow...
PayPal Filter Bypass
Document Title: =============== Paypal Inc Bug Bounty 109 MOS - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1050 PayPal Security UID: Pq115cey Release Date: ============= 2014-05-14 Vulnerability Laboratory ID VL-ID:...
CVE-2013-2705
Cross-site request forgery CSRF vulnerability in the WordPress Simple Paypal Shopping Cart plugin before 3.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings...
CVE-2013-2705
CVE-2013-2705 is a CSRF vulnerability in the WordPress Simple PayPal Shopping Cart plugin (pre-3.6). It allows remote attackers to hijack the administrator’s session and perform plugin-setting changes. Affected: WordPress plugin versions before 3.6. Exploitation details are not provided in the do...
CVE-2013-2705
Cross-site request forgery CSRF vulnerability in the WordPress Simple Paypal Shopping Cart plugin before 3.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings...
Paypal BBP #109 MOS - Bypass & Persistent Vulnerability
Document Title: =============== Paypal BBP 109 MOS - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1050 PayPal Security UID: Pq115cey Video: http://www.vulnerability-lab.com/getcontent.php?id=1273 Video Demonstration:...
Paypal BBP #109 MOS - Bypass & Persistent Vulnerability
Document Title: =============== Paypal BBP 109 MOS - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1050 PayPal Security UID: Pq115cey Video: http://www.vulnerability-lab.com/getcontent.php?id=1273 Video Demonstration:...
Nasty Covert Redirect Vulnerability found in OAuth and OpenID
After Heartbleed bug, a security flaw in widely used open-source software OpenSSL that puts countless websites at risk, another vulnerability has been found in popular authentication software OpenID and authorization software OAuth. Wang Jing, a Chinese mathematics Ph.D student at the Nanyang...
iOS end of the Alipay aeration unlock vulnerability wrong 5 times to unlock it-vulnerability warning-the black bar safety net
1 2 3 0 6 purchase train tickets available Alipay, Beijing 5 0 0 0 taxi available PayPal payment...... With PayPal increasingly wide range of applications, which frequently exposed the security risks are also a concern. Recently, the iOS end phone PayPal is aeration out there to unlock the...
Like Apple's TouchID, Galaxy S5 Vulnerable to Fingerprint Hack
Researchers published a video this week demonstrating how Samsung’s latest entry in the smartphone arena, the Galaxy S5, is vulnerable to a hack that involves lifting and copying fingerprints to trick the phone’s biometric sensor. Much like the Apple iPhone 5S, the smartphone, which first hit the...
Samsung Galaxy S5 Fingerprint Scanner Easily Get Hacked
Samsung Galaxy S5 Fingerprint feature promises an extra layer of security for your smartphone, which also lets you make payments through PayPal. But does it really secure? Just three days after the launch of the Galaxy S5, Security researchers have successfully managed to hack Galaxy S5 Fingerpri...
PayPal for Android SSL证书校验安全漏洞
CVE ID:CVE-2013-7201 PayPal for Android是一款用于安卓的paypal支付应用。 PayPal for Android WebHybridClient类不正确校验服务器SSL证书，允许攻击者利用漏洞伪造HTTPS链接，进行中间人等攻击。 0 PayPal for Android 5.3 目前没有详细解决方案提供： https://play.google.com/store/apps/details?id=com.paypal.android.p2pmobile&hl=en...
Paypal is a Dom-type XSS vulnerability analysis-vulnerability warning-the black bar safety net
DOM xss, also known as the third type ofxss, or type 0 to. Now DOM - xssmore and more, in addition to because of the variety of JS libraries such as YUI, Jquery, Jquery mobile, etc., there are many programming languages, such as php more support for HTML5 features. W3school defect code sample Man...
Threat Outbreak Alert: Fake Account Information Request Email Messages on March 17, 2014
Medium Alert ID: 33366 First Published: 2014 March 17 14:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an identity confirmation request from PayPal for the recipient. The text in the email message attempts to convin...
eBay and PayPal UK website hacked by Syrian Electronic Army
A pro-hacker group, aligned with president Bashar al-Assad, very well known as Syrian Electronic Army SEA has again gained the media attention by adding the popular sites, i.e. eBay UK and PayPal UK to its victim list. After targeting websites of various media agencies, government organizations a...
