Webinar with Rick Orloff, ex CISO of eBay

Join us at 11 am PDT on Wednesday, September 27 for a live frank conversation with Rick Orloff, CSO of Code42 and former CISO of eBay. UPDATE: The recorded webinar is available as a podcast: Rick shared his insights about the changing role of security with new realities of DevOps world, new...

eBay like Auction PHP Script 2.2 - (id) Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: eBay like Auction PHP Script 2.2 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/ebay-like-auction-script.htm Demo:...

ICAuction 2.2 - 'id' SQL Injection

Exploit Title: eBay like Auction PHP Script 2.2 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/ebay-like-auction-script.htm Demo: http://icloudcenter.net/demos/icauction/ Version: 2.2 Category: Webapps Tested on:...

ICAuction 2.2 - (id) Parameter SQL InjectionVulnerability

Exploit for php platform in category web applications Exploit Title: eBay like Auction PHP Script 2.2 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/ebay-like-auction-script.htm Demo:...

sammler.com XSS vulnerability

Vulnerable URL: http://www.sammler.com/coins/valuablecoinsatebay.asp?land=Europe=1"...

sammler.com XSS vulnerability

Vulnerable URL: http://www.sammler.com/stamps/valuablestampsatebay.asp?land=Canada=1/-///'/"//--...

Over 8,600 Vulnerabilities Found in Pacemakers

"If you want to keep living, Pay a ransom, or die." This could happen, as researchers have found thousands of vulnerabilities in Pacemakers that hackers could exploit. Millions of people that rely on pacemakers to keep their hearts beating are at risk of software glitches and hackers, which could...

eBay Auction Premium Clone Script 6.42 SQL Injection

Title: eBay Auction Premium Clone Script - SQL injection Credit: Bilal KARDADOU Vendor: http://bimedia.info Vendor URL: http://bimedia.info/ebay-auction-premium-clone-script/ Product: eBay Auction Premium Clone Script Demo: http://ebayp.clonedemo.com/ Google Dork: N/A Product & Service...

eBay - Buy, Sell & Save Money - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application eBay - Buy, Sell & Save Money published at the 'play' market has multiple vulnerabilities...

fyp.ebay.fr XSS vulnerability

Vulnerable URL: https://fyp.ebay.fr/EnterUserInfo?=" /%3E%3C/script%3E%3Cscript%3Ealert'OPENBUGBOUNTY';%3C/script%3E%3Cscript%3E// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

merchants.ebaycommercenetwork.com XSS vulnerability

Vulnerable URL: https://merchants.ebaycommercenetwork.com/messages.jsp?langCode=enUS" Details: Description| Value ---|--- Patched:| Yes, at 17.03.2017 Latest check for patch:| 17.03.2017 07:47 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

merchant.ebaycommercenetwork.com XSS vulnerability

Vulnerable URL: https://merchant.ebaycommercenetwork.com/messages.jsp?langCode=enUS" Details: Description| Value ---|--- Patched:| Yes, at 17.03.2017 Latest check for patch:| 17.03.2017 07:47 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculat...

Bypassing Ebay XSS Protection to launch XSS by Nirmal Dahal

This is a small proof of concept regarding “Reflective Cross-Site Scripting R-XSS ” which I had found on Ebay. I am not an active participant in bug bounty programs, but one day I had finished all my office works so I was surfing on Facebook and received a message from my brother, Samir, asking f...

fyp.ebay.com.hk XSS vulnerability

Vulnerable URL: https://fyp.ebay.com.hk/EnterUserInfo?=19" Details: Description| Value ---|--- Patched:| Yes, at 11.08.2016 Latest check for patch:| 11.08.2016 22:42 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

fyp.ebay.ch XSS vulnerability

Vulnerable URL: https://fyp.ebay.ch/EnterUserInfo?=19" Details: Description| Value ---|--- Patched:| Yes, at 29.08.2017 Latest check for patch:| 29.08.2017 05:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Che...

fyp.ebay.pl XSS vulnerability

Vulnerable URL: https://fyp.ebay.pl/EnterUserInfo?=19" Details: Description| Value ---|--- Patched:| Yes, at 11.08.2016 Latest check for patch:| 11.08.2016 22:42 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Che...

fyp.ebay.co.uk XSS vulnerability

Vulnerable URL: https://fyp.ebay.co.uk/EnterUserInfo?=19" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check fyp.ebay.co.uk SSL connection:| Grade: C+ Coordinat...

fyp.ebay.com.au XSS vulnerability

Vulnerable URL: https://fyp.ebay.com.au/EnterUserInfo?=19" Details: Description| Value ---|--- Patched:| Yes, at 11.08.2016 Latest check for patch:| 11.08.2016 22:42 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

fyp.ebay.in XSS vulnerability

Vulnerable URL: https://fyp.ebay.in/EnterUserInfo?=19%22%3E%3Cimg%20src=null%20onerror=alert/OPENBUGBOUNTY/%3E%3C!-- Details: Description| Value ---|--- Patched:| Yes, at 11.08.2016 Latest check for patch:| 11.08.2016 22:42 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

fyp.ebay.de XSS vulnerability

Vulnerable URL: https://fyp.ebay.de/EnterUserInfo?=19%22%3E%3Cimg%20src=null%20onerror=alert/OPENBUGBOUNTY/%3E%3C!-- Details: Description| Value ---|--- Patched:| Yes, at 11.08.2016 Latest check for patch:| 11.08.2016 22:42 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...