3045 matches found
Magecart Returns with Advertising Library Tactic
The Magecart card-skimming crime conglomerate has changed up its tactics in recent campaigns, injecting malicious code into third-party Java libraries used by e-commerce websites to serve advertisements. Typically, Magecart subsidiaries tend to compromise a few targeted websites in order to...
BuInteractive Web Design 1.0 SQL Injection
Exploit Title : BuAdegnteractive Web Design 1.0 SQL Injection Author Discovered By : KingSkrupellos Date : 30/12/2018 Vendor Homepage : buinteractive.com Tested On : Windows and Linux Category : WebApps Exploit Risk : Medium Version Information : 1.0 - Microsoft ASP.NET - IIS 6.0 + Windows Server...
Apache OFBiz 16.11.05 Cross Site Scripting
Exploit Title: Apache OFBiz v16.11.05 - Stored Cross-Site Scripting Vulnerability Google Dork: N/A Date: 09 - December - 2018 Exploit Author: DKM Vendor Homepage: https://ofbiz.apache.org/ Software Link: https://www.apache.org/dyn/closer.lua/ofbiz/apache-ofbiz-16.11.05.zip Version: v16.11.05 Test...
Apache OFBiz 16.11.05 - Cross-Site Scripting Vulnerability
Exploit for multiple platform in category web applications Exploit Title: Apache OFBiz v16.11.05 - Stored Cross-Site Scripting Vulnerability Exploit Author: DKM Vendor Homepage: https://ofbiz.apache.org/ Software Link: https://www.apache.org/dyn/closer.lua/ofbiz/apache-ofbiz-16.11.05.zip Version:...
DSMall open source multi-user mall system front-end command execution vulnerability
DSMall is an open source B2B2C e-commerce system created by Deshaun Networks. DSMall open source multi-user mall system in the foreground there is a command injection vulnerability . Attackers can use the vulnerability to obtain server privileges...
Apache OFBiz 16.11.05 - Cross-Site Scripting
Exploit Title: Apache OFBiz v16.11.05 - Stored Cross-Site Scripting Vulnerability Google Dork: N/A Date: 09 - December - 2018 Exploit Author: DKM Vendor Homepage: https://ofbiz.apache.org/ Software Link: https://www.apache.org/dyn/closer.lua/ofbiz/apache-ofbiz-16.11.05.zip Version: v16.11.05 Test...
Apache OFBiz 16.11.05 - Cross-Site Scripting
Apache OFBiz 16.11.05 - Cross-Site Scripting Exploit Title: Apache OFBiz v16.11.05 - Stored Cross-Site Scripting Vulnerability Google Dork: N/A Date: 09 - December - 2018 Exploit Author: DKM Vendor Homepage: https://ofbiz.apache.org/ Software Link:...
WordPress Simple-E-Commerce-Shopping-Cart 2.2.5 Database Disclosure
Exploit Title : WordPress Simple-E-Commerce-Shopping-Cart Plugins 2.2.5 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 08/12/2018 Vendor Homepage : wordpress.org/plugins/simple-e-commerce-shopping-cart/ Owner of the Script : Niaz Showke...
Stored XSS Vulnerability in Cloud EC E-commerce System Version V1.2.1
Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC e-commerce system V1.2.1 version of the existence of stored XSS vulnerability, an attacker can exploit...
Magecart Credit Card Stealer
Magecart is a malicious javascript code injected into e-commerce websites in order to steal payment details. A compromised website containing the malicious code may leak the customer's payment details to the attacker...
How to Shop Online Like a Security Pro
'Tis the season when even those who know a thing or two about Internet scams tend to let down their guard in the face of an eye-popping discount or the stress of last-minute holiday shopping. So here's a quick refresher course on how to make it through the next few weeks without getting snookered...
Podcast: Breaking Down the Magecart Threat (Part One)
Threatpost editor Lindsey O’Donnell talks to Rapid7’s Chief Data Scientist, Bob Rudis, about the dangers that the Magecart group poses when it comes to e-commerce websites. Magecart, a financially motivated cyberattack group made up of several smaller gangs, has been behind recent payment-card...
Managing the Risk of IT-OT Convergence
A few years ago, it wasn’t easy getting executives on board with the concept of operational technology OT security. Having finally come around to acknowledging the need for information technology IT security, boards and C-suite executives at industrial enterprises were then faced with the...
Ahead of Black Friday, Rash of Malware Families Takes Aim at Holiday Shoppers
No less than 14 malware families are targeting e-commerce brands to steal from unsuspecting consumers ahead of the official holiday shopping season. As the Black Friday post-Thanksgiving buying bonanza looms, in all of its door-busting and elbow-throwing glory, many are opting to stay at home and...
Black Friday alert
Banking Trojans traditionally target users of online financial services; looking for financial data to steal or building botnets out of hacked devices for future attacks. However, over time, several of these banking Trojans have enhanced their functionality, launching new variants and extending...
That Domain You Forgot to Renew? Yeah, it’s Now Stealing Credit Cards
If you own a domain name that gets decent traffic and you fail to pay its annual renewal fee, chances are this mistake will be costly for you and for others. Lately, neglected domains have been getting scooped up by crooks who use them to set up fake e-commerce sites that steal credit card detail...
Mobile Shopping Growth Accelerates During Diwali
Diwali is the Hindu festival of lights, celebrated every autumn in October or November. According to Redseer Consulting, the sales volume during the festival usually accounts for about 35%-40% of the annual sales of e-commerce in India; for 2018 Redseer predicts $2.5 to $3 billion gross merchandi...
Degrau Publicidade e Internet Plataforma de E-commerce SQL Injection Vulnerability
Degrau Publicidade e Internet Plataforma de E-commerce is an e-commerce platform system. A SQL injection vulnerability exists in the Busca.aspx.cs file in Degrau Publicidade e Internet Plataforma de E-commerce. A remote attacker could exploit this vulnerability to execute arbitrary SQL commands...
WordPress Flaw Opens Millions of WooCommerce Shops to Takeover
Up to 4 million online merchants who use the popular WooCommerce WordPress plugin are vulnerable to a file deletion vulnerability that could allow a rogue “shop manager” to escalate privileges and eventually execute remote code on impacted websites. Researchers at RIPS Technologies trace the bug ...
