39 matches found
Malicious Package
Overview shein-bbl is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
Malicious code in shein-icon (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 386e2f5ba0bfb4252a77d5c4f22efa158df543a3f4fba6cdeb5e7b8fe6e40e38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6083 Malicious code in shein-icon (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 386e2f5ba0bfb4252a77d5c4f22efa158df543a3f4fba6cdeb5e7b8fe6e40e38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
WordPress Newsletter plugin <= 7.4.4 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered by Phyo Win Shein in WordPress Newsletter plugin versions = 7.4.4. Solution Update the WordPress Newsletter plugin to the latest available version at least 7.4.5...
SHEIN: RCE via npm misconfig -- installing internal libraries from the public registry
The following node package has been installed on at least one shein owned build/development server directly from the public npm registry. https://www.npmjs.com/package/shineout-mobile This package should normally be downloaded from the internal shein registry, but a misconfiguration appears to ha...
ca.shein.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1174021 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
es.shein.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1174010 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
au.shein.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1174009 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
shein.in XSS vulnerability
Open Bug Bounty ID: OBB-689650 Description| Value ---|--- Affected Website:| shein.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Malware on SHEIN Servers Compromises Data of 6.4M Customers
Email addresses and encrypted passwords of over 6.4 million SHEIN customers were stolen over the summer after the women’s retailer said it suffered a “concerted criminal cyberattack” on its computer network. The data breach occurred between June and August 2018, the company said in a recent...
SHEIN-Fashion Shopping Site Suffers Data Breach Affecting 6.5 Million Users
U.S. online fashion retailer SHEIN has admitted that the company has suffered a significant data breach after unknown hackers stole personally identifiable information PII of almost 6.5 million customers. Based in North Brunswick and founded in 2008, SHEIN has become one of the largest online...
SHEIN-Fashion Shopping Site Suffers Data Breach Affecting 6.5 Million Users
U.S. online fashion retailer SHEIN has admitted that the company has suffered a significant data breach after unknown hackers stole personally identifiable information PII of almost 6.5 million customers. Based in North Brunswick and founded in 2008, SHEIN has become one of the largest online...
CVE-2017-14710
The Shein Group Ltd. "SHEIN - Fashion Shopping" app -- aka shein fashion-shopping/id878577184 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The Shein Group Ltd. "SHEIN - Fashion Shopping" app -- aka shein fashion-shopping/id878577184 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2017-14710
The Shein Group Ltd. "SHEIN - Fashion Shopping" app -- aka shein fashion-shopping/id878577184 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2017-14710
The CVE-2017-14710 entry concerns the iOS version of the SHEIN - Fashion Shopping app (shein fashion-shopping/id878577184). The root issue is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information vi...
shein.in XSS vulnerability
Open Bug Bounty ID: OBB-575267 Description| Value ---|--- Affected Website:| shein.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
shein.in XSS vulnerability
Open Bug Bounty ID: OBB-453673 Description| Value ---|--- Affected Website:| shein.in Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
SheIn (THE YUB) - Sheinside. - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application SheIn THE YUB - Sheinside. published at the 'play' market has multiple vulnerabilities...