rangehooddirectbuy.com XSS vulnerability

Open Bug Bounty ID: OBB-647719 Description| Value ---|--- Affected Website:| rangehooddirectbuy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-13146

The mintToken, buy, and sell functions of a smart contract implementation for LEF, an Ethereum token, have an integer overflow...

Buffer overflow

The buy function of a smart contract implementation for Gold Reward GRX, an Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the buyer because of overflow of the multiplication of its argument amount and a manipulable variable buyPrice, aka the...

CVE-2018-11446

The buy function of a smart contract implementation for Gold Reward GRX, an Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the buyer because of overflow of the multiplication of its argument amount and a manipulable variable buyPrice, aka the...

LaraChurch 1.0 Shell Upload

Exploit Title: LaraChurch - Complete Church Management System - Remote Shell Upload Date: 2018/24/06 Exploit Author: ShanoWeb Author Mail : MrdotNet2NetatGmaildotcom Vendor Homepage: https://creatydev.com Software Buy:...

advertising.bestbuy.com XSS vulnerability

Open Bug Bounty ID: OBB-627406 Description| Value ---|--- Affected Website:| advertising.bestbuy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

housing.com XSS vulnerability

Open Bug Bounty ID: OBB-620691 Description| Value ---|--- Affected Website:| housing.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mobile-phone-buy.ru XSS vulnerability

Open Bug Bounty ID: OBB-613748 Description| Value ---|--- Affected Website:| mobile-phone-buy.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Vendor Risk Bites Sears, Delta and Best Buy, while Saks, Lord & Taylor Deal With Breach

Data breaches dominated the cyber security headlines last week, as Sears, Delta, Best Buy, Saks, and Lord & Taylor all found themselves in the news. Sears, Delta and Best Buy: Another vendor risk incident What do retail giant Sears Holdings, consumer electronics chain Best Buy and Delta Air Lines...

Impact Of Chat Service Breach Expands To Best Buy, Kmart

The number of companies coming forward as victims of a data breach – that potentially exposed hundreds of thousands of credit card payment information – has expanded to include Best Buy and Kmart. Last week, software service provider 247.ai, a company that provides online chat services for Delta,...

Mail.ru: CSRF на покупку товара https://lootdog.io/

CSRF vulnerability for item buy action. On the time of reporting, lootdog.io clientside vulnerabilities were not covered with bug bounty...

Tripbuddy Travel, Locations, And Events 1.0 Cross Site Scripting

Exploit Title: Tripbuddy - Travel, Locations and Events Web App - xss Google Dork: N/A Date: 2017/28/12 Exploit Author: ShanoWeb Author Mail : MrdotNet2NetatGmaildotcom Vendor Homepage: https://tripbuddy-app.com/ Software Buy:...

Locations Multipurpose CMS Directory Theme 1.0 Cross Site Scripting

Exploit Title: Locations - Multipurpose CMS Directory Theme - xss Google Dork: N/A Date: 2017/27/12 Exploit Author: ShanoWeb Author Mail : MrdotNet2NetatGmaildotcom Vendor Homepage: https://themerig.com Software Buy:...

Sendroid < 6.5.0 - SQL Injection

Exploit Title: Sendroid - Bulk SMS Portal, Marketing Script 5.0.0 - 6.5.0 - SQL Injection Google Dork: "welcome to SMS portal" Date: 22/12/2017 Exploit Author: Onwuka Gideon Contact: http://twitter.com/@gideononwuka Vendor Homepage: http://ynetinteractive.com/ Software Buy:...

webasyst.ru XSS vulnerability

Vulnerable URL: https://www.webasyst.ru/buy/store/shop?locale=%22%3E%3Csvg%20onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 12.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 120776 VIP website status:| No...

Cybersecurity in the Workplace is Everybody’s Business

What can individual users do to preserve cybersecurity at work? Your organization is spending on cybersecurity tools, you have an awareness program, and if you look you will find that there are standards and procedures for choosing and maintaining products to help keep information secure. But wha...

Buy Slowly App has an arbitrary user registration vulnerability

Buy Slowly APP is a client application that provides users with a shopping guide and price comparison website that brings together information on offers, event promotions, historical price trends, etc. from all major online shopping malls. There is an arbitrary user registration vulnerability in...

buy-painting.com XSS vulnerability

Open Bug Bounty ID: OBB-235606 Description| Value ---|--- Affected Website:| buy-painting.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Joomla JooDatabase 3.1.0 SQL Injection

Exploit Title: Joomla! Component JooDatabase v3.1.0 - SQL Injection Google Dork: inurl:index.php?option=comjoodb Date: 24.02.2017 Vendor Homepage: https://feenders.de/ Software Buy: https://extensions.joomla.org/extensions/extension/core-enhancements/coding-a-scripts-integration/joodatabase/ Demo...

Joomla! Component GPS Tools 4.0.1 - SQL Injection

Joomla! Component GPS Tools 4.0.1 - SQL Injection Exploit Title: Joomla! Component GPS Tools v4.0.1 - SQL Injection Google Dork: inurl:index.php?option=comgpstools Date: 24.02.2017 Vendor Homepage: http://corejoomla.com/ Software Buy:...