CVE-2013-0118

CS-Cart before 3.0.6, when PayPal Standard Payments is configured, allows remote attackers to set the payment recipient via a modified value of the merchant's e-mail address, as demonstrated by setting the recipient to one's self...

Code injection

CS-Cart before 3.0.6, when PayPal Standard Payments is configured, allows remote attackers to set the payment recipient via a modified value of the merchant's e-mail address, as demonstrated by setting the recipient to one's self...

CVE-2013-0118

CS-Cart before 3.0.6, when PayPal Standard Payments is configured, allows remote attackers to set the payment recipient via a modified value of the merchant's e-mail address, as demonstrated by setting the recipient to one's self...

CVE-2013-0118

CVE-2013-0118 affects CS-Cart prior to 3.0.6 where PayPal Standard Payments is configured. The vulnerability allows a remote attacker to change the payment recipient by sending a modified merchant email address, effectively setting the recipient to themselves. The NVD lists a base score of 5.0 (M...

Hacker raided by FBI after leaking Microsoft next Xbox release information

FBI agents this week raided the home of a Australian hacker who recently leaked a slew of details about Microsoft's next release of Xbox console. "They just took all my computers my hard drives, all of my technology, they took my bank cards, credit cards, bank statements," he said. He had claimed...

Hacker raided by FBI after leaking Microsoft next Xbox release information

FBI agents this week raided the home of a Australian hacker who recently leaked a slew of details about Microsoft's next release of Xbox console. “They just took all my computers my hard drives, all of my technology, they took my bank cards, credit cards, bank statements,” he said. He had claimed...

Twitter added DMARC support to prevent email phishing

Twitter announced via its blog today that it has begun using a new method called Domain-based Message Authentication, Reporting and Conformance DMARC to help prevent email phishing. DMARC is actually a standard for preventing email spoofing, in order to make it harder for attackers to send phishi...

CS-Cart v3.0.4 configured with PayPal Standard Payments design vulnerability

Overview CS-Cart v3.0.4 and possibly other versions configured with PayPal Standard Payment is susceptible to a client-side attack that results in an attacker purchasing items without having to pay for them. Description It has been reported that CS-Cart v3.0.4 configured with PayPal Standard...

PayPal Credentials For Sale, Access Offered Via Proxy Server

An enterprising cybercriminal has opened an underground shop that peddles access to American PayPal accounts which are then accessible through an anonymous proxy service. Webroot’s Dancho Danchev claims that the shop currently has access to 1,543 accounts along with an additional 14 sets of PayPa...

Paypal Marketing Cross Site Scripting

--- Vulnerability No- 1: +URL: https://www.paypal-marketing.com.hk/merchant-enquiries/index.php +Vulnerability Type: Cross Site Scripting XSS + Form Action : POST +POST Data Sent to Produce the Bug :...

PayPal Cross Site Scripting

Title: ====== Paypal Bug Bounty 17 - Persistent Web Vulnerability Date: ===== 2013-01-28 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=671 PayPal UID: tlm30fdsh VL-ID: ===== 671 Common Vulnerability Scoring System: ==================================== 3 Introduction:...

PayPal XSS + Cookie Stealer Exploit

Proof video: http://www.multiupload.nl/1DWHTK7IBP Download and see This is private exploit. You can buy it at https://0day.today...

PayPal Cross Site Scripting

Title: ====== PayPal Bug Bounty 26 - Persistent Web Vulnerabilities Date: ===== 2013-01-26 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=703 PayPal UID: wam19c8kxn VL-ID: ===== 703 Common Vulnerability Scoring System: ==================================== 4.5...

PayPal.com Cross Site Scripting

Title: ====== Paypal Bug Bounty 20 - Persistent Web Vulnerabilities Date: ===== 2013-01-25 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=682 PayPal UID: fxv444khi VL-ID: ===== 682 Common Vulnerability Scoring System: ==================================== 3.5...

Paypal hacker escaped jail

In London today, an 18-year-old anonymous hacker received an 18-month youth rehabilitation order and a 60-hour unpaid work requirement for his involvement in "Operation Payback". One strike against Paypal alone cost the site £3.5 million pounds. But Jake Birchall escaped jail today after the judg...

Paypal hacker escaped jail

In London today, an 18-year-old anonymous hacker received an 18-month youth rehabilitation order and a 60-hour unpaid work requirement for his involvement in "Operation Payback". One strike against Paypal alone cost the site £3.5 million pounds. But Jake Birchall escaped jail today after the judg...

PHP weby directory software 1.2 - Multiple Vulnerabilities

=========================================== Vulnerable Software: PHP Weby directory software version 1.2 Vendor: http://phpweby.com Download: htp://phpweby.com/down/phpwebydirectory.zip Vuln: Blind SQL injection && CSRF Dork: intext:Powered by PHP weby software...

PayPal Cross Site Scripting

Title: ====== Paypal Bug Bounty 10 - Persistent Web Vulnerability Date: ===== 2013-01-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=647 PayPal UID: ixb165sfi VL-ID: ===== 647 Common Vulnerability Scoring System: ==================================== 3.5 Introduction...

PHP weby directory software 1.2 - Multiple Vulnerabilities

PHP weby directory software 1.2 - Multiple Vulnerabilities =========================================== Vulnerable Software: PHP Weby directory software version 1.2 Vendor: http://phpweby.com Download: htp://phpweby.com/down/phpwebydirectory.zip Vuln: Blind SQL injection && CSRF Dork: intext:Power...

Paypal Bug Bounty #17 - Persistent Web Vulnerability

Document Title: =============== Paypal Bug Bounty 17 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=671 PayPal UID: tlm30fdsh Release Date: ============= 2013-01-27 Vulnerability Laboratory ID VL-ID:...