418 matches found
PT-2019-18614 · Woocommerce · Woocommerce Paypal Checkout Payment Gateway
Name of the Vulnerable Software and Affected Versions: WooCommerce PayPal Checkout Payment Gateway plugin version 1.6.8 Description: The issue allows Parameter Tampering in an amount parameter, such as amount 1, in the /cgi-bin/webscr?cmd= cart endpoint. This can be exploited by purchasing an ite...
PHP Scripts Mall Custom T-Shirt Ecommerce Script Input Validation Vulnerability
PHP Scripts Mall Custom T-Shirt Ecommerce Script is a website system for customizing t-shirts online by PHP Scripts Mall India. An input validation vulnerability exists in PHP Scripts Mall Custom T-Shirt Ecommerce Script version 3.1.1, which can be exploited by an attacker to change the amount of...
Monero: Zero-amount miner TX + RingCT allows monero wallet to receive arbitrary amount of monero
NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to verify and then potentially issue a bounty, so be sure to take your time filling out the report! Summary: By mining a...
CVE-2019-9065
PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1 allows parameter tampering of the payment amount...
DDoSing Hospital Networks Landed This Hacktivist in Jail for Over 10 Years
A simple DDoS attack could land you in jail for 10 years or even more. A Massachusetts man has been sentenced to over 10 years in prison for launching DDoS attacks against the computer network of two healthcare organizations in 2014 to protest the treatment of a teenager at the centers. Beyond...
Logic Design Vulnerability in Smart Fruit Content Payment System v2.0.0
Jigo Content Payment System is a professional content payment system for enterprise customers. A logical design vulnerability exists in Jigo Content Payment System v2.0.0. The vulnerability is due to improper handling of user input in the frontend, which can be exploited by an attacker to modify...
Brazilian Crypto exchange hacked; private data of over 264,000 users exposed
By Waqas A Brazilian firm Crypto exchange Atlas has become a victim of a security breach and over 264,000 users’ email addresses, phone numbers, and cryptocurrency amount related information might have been leaked. The news of data hack was reported firstly by a YouTube channel in Brazil called...
Payment Design Vulnerability in the Frontend of Rice CMS
DAMI CMS is a PC building station and cell phone building station integrated all-in-one system. A payment design vulnerability exists in the frontend of Daimi CMS. An attacker can utilize this vulnerability to arbitrarily modify the size of the payment amount...
Denial of service in django
The verifyexists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 relies on Python libraries that attempt access to an arbitrary URL with no timeout, which allows remote attackers to cause a denial of service resource consumption via a URL associated with...
CVE-2018-13219
The sell function of a smart contract implementation for YourCoin ICO Contract Name: ETH033, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...
CVE-2018-13210
The sell function of a smart contract implementation for Providence Crypto Casino PVE Contract Name: ProvidenceCasinoToken, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...
CVE-2018-13201
The sell function of a smart contract implementation for TiTok - Ticket Token Contract Name: MyAdvancedToken7, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...
CVE-2018-13216
The sell function of a smart contract implementation for GreenMed GRMD, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...
CVE-2018-13229
The sell function of a smart contract implementation for RiptideCoin RIPT, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...
CVE-2018-13225
The sell function of a smart contract implementation for MyYLC, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...
CVE-2018-13214
The sell function of a smart contract implementation for GMile, an Ethereum token, has an integer overflow in which "amount sellPrice" can be zero, consequently reducing a seller's assets...
ProvidenceCasino Integer Overflow Vulnerability
ProvidenceCasino PVE is a tradable Ether ERC20 token. An integer overflow vulnerability exists in the sell function of ProvidenceCasino PVE's smart contract implementation where "amount sellPrice" can be zero. An attacker could exploit the vulnerability to reduce the seller's assets...
gosaffron.com XSS vulnerability
Open Bug Bounty ID: OBB-500750 Description| Value ---|--- Affected Website:| gosaffron.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based...
Biometric Shift Employee Management System Cross-Site Scripting Vulnerability (CNVD-2018-01397)
Biometric Shift Employee Management System is an employee management system. A cross-site scripting vulnerability exists in Biometric Shift Employee Management System. The vulnerability can be exploited via the amount parameter in the index.php?user=additiondeduction request...
