318 matches found
Razer: DOM-based XSS on https://zest.co.th/zestlinepay/
The tester discovered a DOM based XSS on a Razer Gold Thailand associated website that could allow stealing of user session cookies. He provided excellent reproduction steps and a video PoC. Razer thanks the tester for his great report and helping us to keep our customers' information secure...
Razer: https://zest.co.th/zestlinepay/checkproduct API endpoint suffers from Boolean-based SQL injection
The tester discovered an unused service that suffered from a SQL injection vulnerability. This service was removed. Razer thanks the tester for his detailed work and report...
Razer: Leftover back-end system on www.zest.co.th allows an unauthorized attacker to generate Razer Gold Pin for free
The tester discovered a residual backend system was left exposed. The system was removed from public access. Razer thanks the tester for his diligence...
Razer: SQL Injection at https://sea-web.gold.razer.com/lab/cash-card-incomplete-translog-resend via period-hour Parameter
The tester discovered a SQL injection issue that allowed access to data via Razer Gold Thailand's sea-web server. Razer appreciates the clear and thorough report...
Razer: SQL injection at https://sea-web.gold.razer.com/demo-th/goto-e2p-web-api.php via Multiple Parameters
The tester discovered a SQL injection vulnerability that allowed the potential extraction of information from a Razer Gold database. Although this turned out to be an unused service, we thank the tester for his diligence...
Razer: SQLi at https://sea-web.gold.razer.com/demo-th/purchase-result.php via orderid Parameter
The tester discovered a SQLi vulnerability on a Razer Gold Thailand server. Razer appreciates the report and the clear PoC...
Razer: [SSRF] Server-Side Request Forgery at https://sea-web.gold.razer.com/dev/simulator via notify_url Parameter
The tester discovered an SSRF that could have allowed the compromise of the web.gold.razer.com server, leading to a significant data breach. Razer thanks the tester for the excellent report...
Razer: [press.razer.com] Origin IP found, Cloudflare bypassed
The tester discovered that the press.razer.com site exposed its IP which could allow bypassing of anti-DDoS mechanisms. While minor, Razer does appreciate the report and the tester bringing this to our attention...
Razer: Reflected XSS on https://www.easytopup.in.th/store/product/return on parameter mref_id
The tester discovered a reflected XSS on Razer Gold Thailand's easytopup.in.th page. We appreciate the excellent POC and code analysis...
Razer: Improper access control on easytopup.in.th transaction page leads to user's information disclosure and may lead to account hijacking
The tester discovered a Razer Gold Thailand server was vulnerable to information disclosure due to the use of a predicable reference ID in application URLs which could lead to the ability obtain phone numbers. Razer thanks the tester for his clear report...
Razer: Access to support tickets and payment history, impersonate razer support staff
The tester discovered the mysupport.razer.com site was vulnerable to a authentication bypass that allowed access to support tickets. Razer thanks the tester for the detailed PoC and diligence in helping us secure our customer's information...
Razer: Aws bucket writable mobile.razer.com
The tester discovered an S3 bucked owned by Mobile that was writeable. No files were present but the permissions were incorrect and subsequently fixed. Razer appreciates the report...
Razer: Reflected XSS at http://promotion.molthailand.com/index.php via promotion_id parameter
The tester discovered a reflected XSS vulnerability on https://easytopup.in.th related to a URL parameter. This issue affected the Firefox browser. Razer thanks the tester for the report and the clear proof of concept...
Razer: User Access Control Bypass Via Razer elevated service ( RzKLService.exe ) which loads exe in misconfigured way.
The tester discovered a Cortex related service suffered from a code path vulnerability that could lead to escalation of privilege. Razer thanks the tester for his report and helping keep our users secure...
Razer: Reflected XSS at https://sea-web.gold.razer.com/cash-card/verify via channel parameter
The tester discovered that the sea-web.gold.razer.com server suffered from a reflected XSS vulnerability. Razer thanks the tester for his report...
Razer: SQL Injection at api.easy2pay.co/add-on/get-sig.php via partner_id Parameter
The tester discovered a SQL injection vulnerability that allowed the potential extraction of sensitive user information from the Razer Gold Thailand database. Razer thanks the tester for his PoC as well as working with the Triage and dev teams to clarify the issue and get it fixed...
Razer: dom based xss on [hello.merchant.razer.com]
The tester discovered a DOM based xss on a Razer Merchant Services status server, associated with an unneeded application. Razer Fintech appreciates the tester bringing this to their attention and the clear PoC...
Razer: Expired reCAPTCHA site key leads to Rate Limit Bypass and Email Enumeration
The tester discovered a configuration issue involving Google reCAPTCHA that would allow adversaries to enumerate valid email addresses for users. While minor, Razer appreciates the report and clear PoC...
Razer: [Razer Pay Mobile App] Broken access control allowing other user's bank account to be deleted
The Razer Pay MY backend API had an access control vulnerability which would allow a client to delete the account of other users by varying the ID. Although an adversary could not target a specific individual by name, they could affect the integrity of the Razer Pay system. This was fixed in...