1045 matches found
Fiserv Forgets to Buy Domain It Used as System Default
Fiserv, a multi-billion-dollar cybersecurity tech provider for financial institutions, forgot to buy the domain used as a default in their systems’ email communications, according to a report. The blunder could have exposed its clients’ user information to anyone with a few bucks to buy the domai...
Covid-19 Vaccine Scams Spread Under Facebook's Watch
Don’t use an iTunes gift card to purchase doses of the vaccine online...
Nespresso smart cards can be exploited for unlimited coffee
By Habiba Rashid Let us imagine that your Nespresso smart card had no limit to how much coffee you can buy with it. A little too convenient, isn’t it? This is a post from HackRead.com Read the original post: Nespresso smart cards can be exploited for unlimited coffee...
MStore API < 3.2.0 - Authentication Bypass With Sign In With Apple
The plugin had an authentication bypass with Sign In With Apple allowing unauthenticated users to recover an authentication cookie with only an email address. The plugin must have a valid purchase code for the request to work curl -X GET --header 'Content-Type: application/json' --header 'Accept:...
newbee-mall 跨站脚本漏洞
newbee-mall is an e-commerce system. A cross-site scripting vulnerability exists in newbee-mall 1.0, where a user only needs to write an xss payload in the address information when purchasing a product, and the vulnerability is triggered when viewing the "View Recipient Information" of the order ...
Man jailed after attempting to buy 3-year-old girl on dark web
By Waqas The Notorious Dark Web Pedophile is a New Zealand national going by the name of Aaron Hutton. This is a post from HackRead.com Read the original post: Man jailed after attempting to buy 3-year-old girl on dark web...
OIC Exponent CMS 输入验证错误漏洞
OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from OIC, USA. The system supports direct editing in the page and provides user management, site configuration, content editing and other functions. An input validation error vulnerability exists in Exponen...
purchase-order-form.com Cross Site Scripting vulnerability OBB-1420438
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
purchasetacvisor.com Cross Site Scripting vulnerability OBB-1317567
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
purchaseandsale-agreement.com Cross Site Scripting vulnerability OBB-1307041
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
asset-purchase-agreement-samples.com Cross Site Scripting vulnerability OBB-1277857
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Visma Public: A sales only user can edit the purchase invoice drafts.
The researcher has found a missing authorization issue: a sales only user could edit the purchase invoice drafts that he shouldn't...
SQL Injection Vulnerability in Purchase 31.0, a Purchasing System of Shanghai Tsuen Lu Software Development Studio
Founded in 2010, Kaixin Studio has been focusing on enterprise applications and constantly updating its products. A SQL injection vulnerability exists in the purchasing system purchase 31.0, which can be exploited by attackers to obtain sensitive information from the database...
Logic flaw vulnerability in 5vshop e-commerce system (CNVD-2020-33242)
5vshop e-commerce system is an enterprise-level open source e-commerce system. 5vshop e-commerce system has a logic flaw vulnerability that can be exploited by an attacker to purchase any goods...
GitLab: Possibilty to purchase Ultimate - 1 Year (EDU or OSS)
Hi, Any user can purchase Ultimate - 1 Year EDU or OSS which is for educational institutions or open source projects.I have found here https://gitlab.com/gitlab-org/customers-gitlab-com/-/issues/860 list of Gitlab plan id and found Ultimate - 1 Year which is free and purchased. Steps to reproduce...
CVE-2020-3956: VMware Cloud Director Code Injection Vulnerability
VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4 do not properly handle input leading to a code injection vulnerability. An authenticated actor may be able to send malicious traffic to VMware Cloud Director which may lead to...
SQL Injection Vulnerability in Star eBook Platform
Star eBook platform is a comprehensive service platform integrating "copyright management, new book release, eBook purchase, sales, lending and knowledge discovery". A SQL injection vulnerability exists in the eBook Platform, which can be exploited by attackers to obtain sensitive information fro...
Cups Easy 1.0 Cross Site Request Forgery
Title: Cups Easy 1.0 - Cross Site Request Forgery Password Reset Date: 2020-01-28 Exploit Author: J3rryBl4nks Vendor Homepage: https://sourceforge.net/u/ajayshar76/profile/ Software Link: https://sourceforge.net/projects/cupseasy/files/cupseasylive-1.0/ Version: 1.0 Tested on Windows 10/Kali...
