German army’s sensitive data found on laptop bought from eBay

By Sudais Asif When dug, it turns out that the laptop contained highly sensitive information including military secrets. This is a post from HackRead.com Read the original post: German army's sensitive data found on laptop bought from eBay...

SQL Injection Vulnerability in Jinan Dotchuang Network Technology Co.

Ebay is a Jinan web company whose core business aspects include Jinan website construction, website production, web design, website development and so on. Ltd. Ebay website building system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from...

CVE-2014-4525

Cross-site scripting XSS vulnerability in magpie/scripts/magpieslashbox.php in the Ebay Feeds for WordPress plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the rssurl parameter...

CVE-2014-4525

Cross-site scripting XSS vulnerability in magpie/scripts/magpieslashbox.php in the Ebay Feeds for WordPress plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the rssurl parameter...

CVE-2014-4525

The CVE-2014-4525 entry describes a cross-site scripting (XSS) vulnerability in the magpie/scripts/magpie_slashbox.php file of the WP Ebay Feeds plugin for WordPress, affecting version 1.1 and earlier. The issue arises via the rss_url parameter, allowing remote attackers to inject arbitrary JavaS...

SQL injection vulnerability in ne***.php page of eBay's php website builder system

Ltd. is a brand of Jinan Dotchuang Network Technology Co., Ltd, which is a high-tech network and software technology service provider and operator in Shandong Province. A SQL injection vulnerability exists in the ne.php page of the eBay website builder system, which can be exploited by attackers ...

600,000 GPS child trackers found vulnerable to location tracking

By Sudais Avast set out to study a variety of GPS tools found on the internet and how secure they are which can be found on Amazon, Alibaba, and eBay among others. This is a post from HackRead.com Read the original post: 600,000 GPS child trackers found vulnerable to location tracking...

WooCommerce Product Feed for Google, Facebook, eBay and Many More < 3.1.15 - Authenticated Reflected XSS

The WooCommerce Product Feed for Google, Bing, eBay and Many More WordPress plugin was affected by an Authenticated Reflected XSS security vulnerability...

iPhone hacking tool Cellebrite being sold on eBay

By Waqas Cellebrite UFED, an iPhone hacking tool made in Israel and widely used by the law enforcement authorities including the Federal Bureau of Investigation, Customs Enforcement and Immigration departments is surprisingly up for sale on eBay. This tool is mainly used for hacking or breaking...

Command Execution Vulnerability in Ebay CMS Single Page System

Single page system is an official extension application for setting up a single page system, supporting template tags, php code, and support for setting it as the home page. Ebay CMS Single Page System has a command execution vulnerability that can be exploited by attackers to gain control of the...

Dirt-Cheap, Legit, Windows Software: Pick Two

Buying heavily discounted, popular software from second-hand sources online has always been something of an iffy security proposition. But purchasing steeply discounted licenses for cloud-based subscription products like recent versions of Microsoft Office can be an extremely risky transaction,...

rover.ebay.com XSS vulnerability

Open Bug Bounty ID: OBB-668854 Description| Value ---|--- Affected Website:| rover.ebay.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Ebay Inc - CSRF Exploitation PoC of User Data Delete

Document Title: =============== Ebay Inc - CSRF Exploitation PoC of User Data Delete References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2053 Video: https://www.youtube.com/watch?v=KUenuqImsBs Release Date: ============= 2018-07-06 Vulnerability Laboratory ID VL-ID:...

Ebay Inc - CSRF Exploitation PoC of User Data Delete

Document Title: =============== Ebay Inc - CSRF Exploitation PoC of User Data Delete References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2053 Video: https://www.youtube.com/watch?v=KUenuqImsBs Release Date: ============= 2018-07-05 Vulnerability Laboratory ID VL-ID:...

CloudPets May Be Out of Business, But Security Concerns Remain

More than a year after CloudPets connected teddy bears were found to have exposed 2.2 million voice recordings between parents and their children in a significant data breach, Amazon, Target and Walmart have pulled the toys from their online markets. But it’s the installed base of the connected...

zipy.co.il XSS vulnerability

Open Bug Bounty ID: OBB-624724 Description| Value ---|--- Affected Website:| zipy.co.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

zipy.co.il IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-623311 Description| Value ---|--- Affected Website:| zipy.co.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

zipy.ro XSS vulnerability

Open Bug Bounty ID: OBB-623309 Description| Value ---|--- Affected Website:| zipy.ro Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SQL Injection Vulnerability in about.asp page of Ebay's website builder system

Ltd. is a brand of Jinan Dotchuang Network Technology Co., Ltd, which is a high-tech network and software technology service provider and operator in Shandong Province. SQL injection vulnerability exists in the about.asp page of Ebay's website building system, which can be exploited by attackers ...

shopomatic.ru XSS vulnerability

Open Bug Bounty ID: OBB-573038 Description| Value ---|--- Affected Website:| shopomatic.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...