Update: Attack on Romanian TLD Register led to Google, Yahoo Defacements and DNS Redirects

UPDATE — DNS hijacking attacks carried out today against the home pages of Google, Yahoo and other high-profile sites in Romania have been traced to an attack on the Romanian Top Level Domain Register, researchers at Kaspersky Lab said. “The altered DNS records propagated from there to different...

PayPal Plaza Cross Site Scripting

Title: ====== Paypal Bug Bounty 21 - Persistent Encoding Vulnerability Date: ===== 2012-11-25 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=684 VL-ID: ===== 684 Common Vulnerability Scoring System: ==================================== 3 Introduction: =============...

PayPal Community Forum Cross Site Scripting

Title: ====== Paypal Bug Bounty 27 - Community Web Vulnerability Date: ===== 2012-11-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=704 VL-ID: ===== 704 Common Vulnerability Scoring System: ==================================== 2.1 Introduction: ============= PayPal ...

PayPal Open Redirection

Title: ====== Paypal BugBounty 11 - Redirection Web Vulnerability Date: ===== 2012-11-22 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=648 VL-ID: ===== 648 Common Vulnerability Scoring System: ==================================== 2 Introduction: ============= PayPal i...

Paypal BBP #2 - Persistent Listing Web Vulnerability

Document Title: =============== Paypal BBP 2 - Persistent Listing Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=634 Release Date: ============= 2012-11-25 Vulnerability Laboratory ID VL-ID: ==================================== 634...

Paypal BBP #2 - Persistent Listing Web Vulnerability

Document Title: =============== Paypal BBP 2 - Persistent Listing Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=634 Release Date: ============= 2012-11-25 Vulnerability Laboratory ID VL-ID: ==================================== 634...

Paypal Bug Bounty #21 - Persistent Encoding Vulnerability

Document Title: =============== Paypal Bug Bounty 21 - Persistent Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=684 Release Date: ============= 2012-11-24 Vulnerability Laboratory ID VL-ID: ==================================== 68...

Paypal Bug Bounty #21 - Persistent Encoding Vulnerability

Document Title: =============== Paypal Bug Bounty 21 - Persistent Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=684 Release Date: ============= 2012-11-24 Vulnerability Laboratory ID VL-ID: ==================================== 68...

Paypal Bug Bounty #27 - Community Web Vulnerability

Document Title: =============== Paypal Bug Bounty 27 - Community Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=704 Release Date: ============= 2012-11-23 Vulnerability Laboratory ID VL-ID: ==================================== 704 Comm...

Paypal Bug Bounty #27 - Community Web Vulnerability

Document Title: =============== Paypal Bug Bounty 27 - Community Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=704 Release Date: ============= 2012-11-23 Vulnerability Laboratory ID VL-ID: ==================================== 704 Comm...

Paypal Bug Bounty #11 - Redirection Web Vulnerability

Document Title: =============== Paypal Bug Bounty 11 - Redirection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=648 Release Date: ============= 2012-11-21 Vulnerability Laboratory ID VL-ID: ==================================== 648...

Paypal Bug Bounty #11 - Redirection Web Vulnerability

Document Title: =============== Paypal Bug Bounty 11 - Redirection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=648 Release Date: ============= 2012-11-21 Vulnerability Laboratory ID VL-ID: ==================================== 648...

Skype Illegally handed over data of alleged Anonymous Paypal Hacker

Dutch media report Skype has Illegally without court order distributed a 16 years old user's personal information including user name, real name, email addresses and the home address used for payment to a private company consistently a police investigation into Anonymous-sanctioned cyber attacks ...

CVE-2011-5237

PayPal WPS ToolKit does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

Code injection

PayPal WPS ToolKit does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2011-5237

PayPal WPS Toolkit is affected by a TLS hostname verification issue: it does not verify that the server hostname matches the certificate’s CN/subjectAltName, enabling MITM with arbitrary valid certificates. Impact is partial confidentiality/integrity exposure as described by NVD; exploitation sta...

CVE-2011-5237

PayPal WPS ToolKit does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

Guy Fawkes Day start with Hack of 28,000 Paypal Accounts

5th November 2012 was the most exciting day in Cyberspace, yesterday we have report about few major hacks and leaks including Hacking of ImageShack Server , thousands of researchers database leak from Symantec portal, then NBC Sports Rotoworld forums and NBC Mobile site was defaced by pyknic hack...

CVE-2012-5802

The PayPal module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2012-5806

The PayPal Payments Pro module in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to...