Airbnb: Generating Unlimited Free Travel Gift Invites | IDOR

After registration you can invite your friends to get some offer on there first trip. Notice that this system is flawed and attacker can generate as many invites he wants without going through the system at all. Original Invite link:...

CVE-2014-5735

The Buy A Gift aka com.wBuyAGift application 13529.90084 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Buy A Gift aka com.wBuyAGift application 13529.90084 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5735

The Buy A Gift aka com.wBuyAGift application 13529.90084 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5735

The Buy A Gift (com.wBuyAGift) Android app version 13529.90084 does not verify SSL/X.509 certificates, allowing MITM attackers to spoof servers and capture sensitive data via crafted certificates. This is CVE-2014-5735; supported by NVD/NIST and related records in connected documents. No exploit ...

CVE-2014-5573

The Appstros - FREE Gift Cards! aka com.appstros.main application 1.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Appstros - FREE Gift Cards! aka com.appstros.main application 1.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5573

The Appstros - FREE Gift Cards! aka com.appstros.main application 1.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5573

The CVE concerns the Android app “The Appstros - FREE Gift Cards!” (package com.appstros.main, version 1.1.3). It states that the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle to spoof servers and capture sensitive information via a crafted certificate. The...

joomla component Gift Exchange com_giftexchange 1.0 Beta - (pkg) Remote SQL Injection

No description provided by source. --------------------------------------------------------------------------------- joomla component Gift Exchange comgiftexchange pkg Remote Sql Injection --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Grou...

Spam Text message offers gift card to Target

A popular scam that always seems to pop up around the holiday shopping season has once again resurfaced.Have you gotten a text message promising a free gift card? All you have to do is click on a link? However, it was a scam. Case : A text message has been popping up on Central New Yorkers' phone...

Sql injection

SQL injection vulnerability in users.php in PHP Gift Registry 1.5.5 allows remote authenticated users to execute arbitrary SQL commands via the userid parameter in an edit action...

CVE-2012-2236

SQL injection vulnerability in users.php in PHP Gift Registry 1.5.5 allows remote authenticated users to execute arbitrary SQL commands via the userid parameter in an edit action...

CVE-2012-2236

PHP Gift Registry 1.5.5 is vulnerable to a SQL injection in users.php (userid parameter in the edit action). The issue allows remote authenticated users to execute arbitrary SQL commands. This is caused by unsafely concatenated input in the edit workflow, enabling database command execution. The ...

CVE-2012-2236

SQL injection vulnerability in users.php in PHP Gift Registry 1.5.5 allows remote authenticated users to execute arbitrary SQL commands via the userid parameter in an edit action...

PHP Gift Registry 1.5.5 SQL Injection

Exploit Title: PHP Gift Registry 1.5.5 SQL Injection Date: 02/22/12 Author: G13 Software Link: https://sourceforge.net/projects/phpgiftreg/ Version: 1.5.5 Category: webapps php Vulnerability The userid parameter in the users.php file is vulnerable to SQL Injection. A user must be signed in to...

PHP Gift Registry 1.5.5 SQL Injection

Exploit Title: PHP Gift Registry 1.5.5 SQL Injection Date: 02/22/12 Author: G13 Software Link: https://sourceforge.net/projects/phpgiftreg/ Version: 1.5.5 Category: webapps php Vulnerability The userid parameter in the users.php file is vulnerable to SQL Injection. A user must be signed in to...

PHP Gift Registry 1.5.5 - SQL Injection

Exploit Title: PHP Gift Registry 1.5.5 SQL Injection Date: 02/22/12 Author: G13 Software Link: https://sourceforge.net/projects/phpgiftreg/ Version: 1.5.5 Category: webapps php Vulnerability The userid parameter in the users.php file is vulnerable to SQL Injection. A user must be signed in to...

PHP Gift Registry 1.5.5 - SQL Injection

PHP Gift Registry 1.5.5 - SQL Injection Exploit Title: PHP Gift Registry 1.5.5 SQL Injection Date: 02/22/12 Author: G13 Software Link: https://sourceforge.net/projects/phpgiftreg/ Version: 1.5.5 Category: webapps php Vulnerability The userid parameter in the users.php file is vulnerable to SQL...

PHP Gift Registry 1.5.5 SQL Injection

Exploit for php platform in category web applications Exploit Title: PHP Gift Registry 1.5.5 SQL Injection Date: 02/22/12 Author: G13 Software Link: https://sourceforge.net/projects/phpgiftreg/ Version: 1.5.5 Category: webapps php Vulnerability The userid parameter in the users.php file is...