MAL-2022-4275 Malicious code in legacy-client-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 878c3ad3b0ac62461718d675a1ce66d1d69b78b09adea752d911fe52a55cca39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gatekeeper-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fccddd88d3d49ba86c9c5d9921f46d6e335d4394bb3f28e7510e3ff32a51b946 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3047 Malicious code in fire-marshal-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e514b2c29f7d622b664e41906ff14ed0ef411f12cd5feaca7177f2bb280fcb32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2179 Malicious code in cookies-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4224e4b52b4dc82f0a72b5956c5d3dc6c0b7d269000aaadca3492fd9aa475a88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1692 Malicious code in brogan-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 142de0f01ce74f3ba2a163121986af8504eb87ba0f598ca801d4a5144f4809b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3276 Malicious code in gatekeeper-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fccddd88d3d49ba86c9c5d9921f46d6e335d4394bb3f28e7510e3ff32a51b946 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2754 Malicious code in environment-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c46f15c2e5010bf65a39cd60098e7657b775a16c1c2199a636be397dc0097f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1175 Malicious code in auth-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware affca85a0c8e959151ae1b55f6bbc3ac15b328ded165ddd269918b33ab725cb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Stripe: [Broken Access Control ] Unauthorized Linking accounts & Linked Accounts info DIsclosure

@mrasg discovered that users of an account with member permissions were improperly allowed to see activated linked accounts and connect new carts to the account. I discovered a Vulnerability that allows the user who has member privileges to connect new carts to the Taxjar account , like...

WordPress ExportFeed: List WooCommerce Products on eBay Store plugin <= 2.0.1.0 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability discovered by 0xdecafbad in WordPress ExportFeed: List WooCommerce Products on eBay Store plugin versions = 2.0.1.0. Solution Deactivate and delete. This plugin has been closed as of November 22, 2021 and is not available for download. Reason: Security Issue...

WordPress WP-Lister for eBay plugin <= 2.0.20 - Unauthenticated Path Traversal vulnerability

Unauthenticated Path Traversal vulnerability found in WordPress WP-Lister for eBay plugin versions = 2.0.20. Solution Update the WordPress WP-Lister for eBay plugin to the latest available version at least 2.0.21...

Techie buys Axon body camera from eBay; finds unencrypted police videos

By Waqas Upon analyzing the camera the researcher found a MicroSD card containing sensitive Police data. This is a post from HackRead.com Read the original post: Techie buys Axon body camera from eBay; finds unencrypted police videos...

Former eBay Execs Allegedly Made Life Hell for Critics

Surveillance. Harassment. A live cockroach delivery. US attorneys have charged six former eBay workers in association with an outrageous cyberstalking campaign...

Used Tesla Components Contain Personal Information

Used Tesla components, sold on eBay, still contain personal information, even after a factory reset. This is a decades-old problem. It's a problem with used hard drives. It's a problem with used photocopiers and printers. It will be a problem with IoT devices. It'll be a problem with everything,...

Sensitive user data found in Tesla car parts sold on eBay

By Deeba Ahmed A hacker found Spotify passwords, Gmail & Netflix session cookies, etc. on Tesla car parts sold on the e-commerce giant. This is a post from HackRead.com Read the original post: Sensitive user data found in Tesla car parts sold on eBay...

German army’s sensitive data found on laptop bought from eBay

By Sudais Asif When dug, it turns out that the laptop contained highly sensitive information including military secrets. This is a post from HackRead.com Read the original post: German army's sensitive data found on laptop bought from eBay...

SQL Injection Vulnerability in Jinan Dotchuang Network Technology Co.

Ebay is a Jinan web company whose core business aspects include Jinan website construction, website production, web design, website development and so on. Ltd. Ebay website building system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from...

CVE-2014-4525

Cross-site scripting XSS vulnerability in magpie/scripts/magpieslashbox.php in the Ebay Feeds for WordPress plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the rssurl parameter...

CVE-2014-4525

Cross-site scripting XSS vulnerability in magpie/scripts/magpieslashbox.php in the Ebay Feeds for WordPress plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the rssurl parameter...

CVE-2014-4525

The CVE-2014-4525 entry describes a cross-site scripting (XSS) vulnerability in the magpie/scripts/magpie_slashbox.php file of the WP Ebay Feeds plugin for WordPress, affecting version 1.1 and earlier. The issue arises via the rss_url parameter, allowing remote attackers to inject arbitrary JavaS...