supersmart.com Cross Site Scripting vulnerability OBB-3524011

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Supersmart 安全漏洞

Supersmart is an artificially intelligent automated checkout for brick-and-mortar retail from Israel's Supersmart. Supersmart Walk suffers from a security vulnerability that stems from the presence of unauthorized actions performed on other customers, which can be exploited by an attacker to rese...

CVE-2022-30628: Undefined Security Weakness

It was possible to download all receipts without authentication. Must first access the API https://XXXX.supersmart.me/services/v4/customer/signin to get a TOKEN. Then you can then access the API that provides invoice images based on the URL...

Supersmart 安全漏洞

Supersmart is an artificially intelligent automated checkout for brick-and-mortar retail by Israel's Supersmart. Supersmart has a security vulnerability that stems from accessing business information without authentication...