CVE-2018-14328

CVE-2018-14328 affects Brynamics “Online Trade” (online trading/cryptocurrency investment system). Connected sources confirm information disclosure via direct requests to endpoints such as /dashboard/addplan, /dashboard/paywithcard/charge, /dashboard/withdrawal, and /privacy&terms, leaking sensit...

SQL Injection Vulnerability in Apple CMS Charge Card Management System

Apple CMS program is a fast website building system that runs on PHP+MYSQL environment. An SQL injection vulnerability exists in the Apple CMS Rechargeable Card Management System. An attacker can exploit the vulnerability to obtain sensitive database information...

Heroes Charge - Exported ContentProvider, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Heroes Charge published at the 'play' market has multiple vulnerabilities...

Coinbase: Prepopulation of email address and name leaks information provided to other merchants

Users of the commerce widget that have entered their name and email into the widget and moved to the currency selection step were vulnerable to a clickjacking attack that revealed name and email to an attacker due to pre-population of the widget's fields. After a user filled out the name / email...

Logic design flaws in Jia Yi Chong App

Jia Yi Charge App is a mobile application for city charging pile information inquiry and use. There is a logical design vulnerability in JiaYiCharge App, which allows an attacker to register any user and reset any user's password by grabbing packets and modifying the cell phone number...

UK Teenager, Aged 18, Charged With Running DDoS-For-Hire Service

A teenage student has been charged with running a supplying malware that was used for launching distributed denial of service DDoS attacks against websites of some of the world's leading businesses. Jack Chappell, an 18-year-old teenager from Stockport, is accused of helping cyber criminals with...

Feds Charge NSA Contractor Accused of Exposing Russian Hacking

The arrest of an alleged source of a classified leak to the Intercept offers a lesson in the risks of spilling secrets. The post Feds Charge NSA Contractor Accused of Exposing Russian Hacking appeared first on WIRED...

Charge & Fuel - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Charge & Fuel published at the 'play' market has multiple vulnerabilities...

Heroes Charge HD - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Heroes Charge HD published at the 'play' market has multiple vulnerabilities...

Battery Widget (Charge Level) - Customized SSL, Redefined SSL Common Names verifier, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Battery Widget Charge Level published at the 'play' market has multiple vulnerabilities...

NOKIA Siemens FlexiISN 3.1 - Multiple Auth Bypass Vulnerabilities

No description provided by source. NOKIA Siemens FlexiISN GGSN Multiple Authentication bypass Vulnerability: NOKIA Siemens FlexiISN Remote: Yes Local: No Class: Input Validation Error Critical: Moderately critical OS : FlexiISN GGSN FISN 3.1 URL 1 for bypassing authentication on AAA Configuration...

Threat Outbreak Alert: Fake Parking Charge Payment Notice Email Messages on May 15, 2014

Medium Alert ID: 34243 First Published: 2014 May 15 15:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a parking violation payment notice for the recipient. The text in the email message attempts to convince the...

JonDo 00.16.001 Released - Automatic error recognition and easier usability

JonDo 00.16.001 Released - Automatic error recognition and easier usability JonDos publishes a new version of the JonDo-Software, an IP changer and IP anonymization program, that you can use for anonymous surfing in the Internet with high security anonymous proxy servers. What is JonDo? JonDo is ...

MTPuTTY 1.0 Beta - Multi-Tabbed PuTTY Released

MTPuTTY 1.0 Beta - Multi-Tabbed PuTTY Released MTPuTTY Multi-tabbed PuTTY helps you to manage different PuTTY connections in one tabbed GUI interface. Every PuTTY connection runs in a separate tab and you can switch between PuTTYs as easy as you switch between opened pages in web browsers. When y...

UK Authorities Charge Suspected LulzSec Member for DDoS Attacks

A 19 year-old UK man was charged on Wednesday for the role he played in attacks on the UK’s Serious Organized Crime Agency SOCA as well as UK’s British Phonographic Industry BPI and International Federation of the Phonographic Industry IFPI, according to a statement released by the Metropolitan...

Multi-Million Dollar Cyber Fraud Investigation Surrounds Exchange Students

Two international students from Vietnam are under investigation by the Department of Homeland Security on charges of identity theft and wire fraud. The two Winona State University students, Tram Vo and Khoi Van, are alleged to have taken part in a criminal ring that defrauded ecommerce merchants...

Video Charge Studio 2.9.5.643 Buffer Overflow

!/usr/bin/python Exploit Title: Video Charge Studio = 2.9.5.643 .vsc Buffer Overflow SEH Date: 12/05/2010 Author: xsploitedsec URL: http://www.x-sploited.com/ Contact: xsploitedsecurity at x-sploited.com Software Link: http://www.videocharge.com/download/VideoChargeStudioInstall.exe Version: =...

Video Charge Studio 2.9.5.643 - '.vsc' Local Buffer Overflow (SEH)

!/usr/bin/python Exploit Title: Video Charge Studio = 2.9.5.643 .vsc Buffer Overflow SEH Date: 12/05/2010 Author: xsploitedsec URL: http://www.x-sploited.com/ Contact: xsploitedsecurity at x-sploited.com Software Link: http://www.videocharge.com/download/VideoChargeStudioInstall.exe Version: =...

NOKIA Siemens FlexiISN 3.1 Multiple Auth Bypass Vulnerabilities

No description provided by source. NOKIA Siemens FlexiISN GGSN Multiple Authentication bypass Vulnerability: NOKIA Siemens FlexiISN Remote: Yes Local: No Class: Input Validation Error Critical: Moderately critical OS : FlexiISN GGSN FISN 3.1 URL 1 for bypassing authentication on AAA Configuration...

On bypass Internet cafes charge system-vulnerability warning-the black bar safety net

This method no matter what the cafes,whatever he means what the charging system,can be used,but we note that,in people with less time or people much more special when you use less,easy to be found!! Okay,now teach you: One into the cafe,the computer is off,you first boot,and then continuously...