Stripo Inc: Able to use 'PREMIUM TEMPLATES' in 'FREE PLAN' at [https://my.stripo.email/cabinet/#/my-templates/]

Summary: Hi Team, I had found a way to use Premium Templates with FREE PLAN only. As generally Premium Templates can be only used by PAID USERS. So this will lead to heavy loss in Business. It is also possible to use components in DEMO EDITOR which are only available after registration, by just...

Reddit: Race condition leads to Inflation of coins when bought via Google Play Store at endpoint https://oauth.reddit.com/api/v2/gold/android/verify_purchase

Hi, Summary: When we purchase coins from Reddit's mobile app using Android, https://oauth.reddit.com/api/v2/gold/android/verifypurchase is called with parameters like transactionid and token. There exists a race condition on this endpoint which allows an attacker to get coins many times more than...

Semrush: An attacker can buy marketplace articles for lower prices as it allows for negative quantity values leading to business loss

Hi there, When we Summary: When someone goes to https://www.semrush.com/marketplace/offers/ and orders for articles, an attacker can pay for less than intended due to negative quantities being allowed. Steps To Reproduce: - Go to https://www.semrush.com/marketplace/offers/ - Click on 500 Words$40...

Ping Identity: No valid SPF record not found

There are no SPF Records found for ort-admin.pingone.com Description: There is an email spoofing vulnerability. Email spoofing is the forgery of an email header so that the message appears to have originated from someone or somewhere other than the actual source. Email spoofing is a tactic used i...