CVE-2017-1002017

Vulnerability in wordpress plugin gift-certificate-creator v1.0, The code in gc-list.php doesn't sanitize user input to prevent a stored XSS vulnerability...

CVE-2017-1002017

CVE-2017-1002017 affects the WordPress plugin Gift Certificate Creator 1.0 . The vulnerability is in the file gc-list.php , where user input is not sanitized, enabling a stored XSS vulnerability. According to NVD, the CVSS2/3 base scores are 4.3 (MEDIUM) and 6.1 (MEDIUM), indicating moderate impa...

podumnavillage.ie XSS vulnerability

Vulnerable URL: http://www.podumnavillage.ie/gift-vouchers2.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4653000 VIP website status:| No Coordinated Disclosure Timeline:...

IC3 Releases Alert on Gift Card Scams

The Internet Crime Complaint Center IC3 has released an alert warning consumers of music gift card scams. This type of scam targets victims, gains their confidence, and tricks them into providing gift card information. To stay safer online, review the IC3 alert on Online Scammers Require Payment...

peek.com XSS vulnerability

Vulnerable URL: https://www.peek.com/purchase/giftcard/594bef096b767f2106002d1b/finalize Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 72260 VIP website status:| Yes Coordinated...

AppNana - Free Gift Cards - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application AppNana - Free Gift Cards published at the 'play' market has multiple vulnerabilities...

Fraudsters Using GiftGhostBot Botnet to Steal Gift Card Balances

Gift cards have once again caused quite a headache for retailers, as cyber criminals are using a botnet to break into and steal cash from money-loaded gift cards provided by major retailers around the globe. Dubbed GiftGhostBot, the new botnet specialized in gift card fraud is an advanced...

DOBOZ - Gift Cards made easy - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application DOBOZ - Gift Cards made easy published at the 'play' market has multiple vulnerabilities...

FeaturePoints: Free Gift Cards - BSD license, Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application FeaturePoints: Free Gift Cards published at the 'play' market has multiple vulnerabilities...

Pornhub: Race Condition Vulnerability On Pornhubpremium.com

The researcher discovered a race condition which allowing for gift code reuse across using multiple accounts to gain Premium access. I was able to create unlimted accounts and redeem already used gift cards to give the accounts as many days of subscription as I wanted to which could then be used ...

AdvertApp: Free Gift Card - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application AdvertApp: Free Gift Card published at the 'play' market has multiple vulnerabilities...

AC.Free Gift Cards - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application AC.Free Gift Cards published at the 'play' market has multiple vulnerabilities...

carte-cadeau.decathlon.fr XSS vulnerability

Vulnerable URL: https://carte-cadeau.decathlon.fr/fr?login=xss5=xss4=xss3%22%3E%3C/form%3E%3Cimg%20src=x%20onerror=alert%27OPENBUGBOUNTY%27%3E%3C!--=xss1=xss2 Details: Description| Value ---|--- Patched:| Yes, at 16.12.2016 Latest check for patch:| 16.12.2016 13:00 GMT Vulnerability type:| XSS...

antenna.gift XSS vulnerability

Vulnerable URL: http://antenna.gift/?word=%5B%27%27%5D%27%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 254804 V...

Android Ransomware now targets your Smart TV, Too!

Do you own a Smartwatch, Smart TV, Smart fridge, or any Internet-connected smart device? If your answer is yes, then you need to know the latest interest of the cyber criminals in the field of Internet of Things. Ransomware! After targeting hospitals, universities, and businesses, Ransomware has...

kodak.com XSS vulnerability

Vulnerable URL: http://www.kodak.com/global/mul/digital/flash/giftguide/giftguide0710/guide/main.swf?xmlfile=http://nsa.is.spying-on.us/k.xml Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 31015 VIP website...

Android Ransomware Attacks Using Towelroot, Hacking Team Exploits

A menacing wave of ransomware that locks up Android devices and demands victims pay $200 in Apple iTunes gift card codes is raising concern among security researchers. The ransomware attacks, they say, open a new chapter for Android vulnerabilities similar to Microsoft’s obsolete, unpatched and...

Dibo1, gift dragon by ToMoKiDS - ContentProvider mode not defined, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Dibo1, gift dragon by ToMoKiDS published at the 'play' market has multiple vulnerabilities...

Dibo the Gift Dragon 2 - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Dibo the Gift Dragon 2 published at the 'play' market has multiple vulnerabilities...

Angelina's Gift for Ms. Mimi - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Angelina's Gift for Ms. Mimi published at the 'play' market has multiple vulnerabilities...