Joy Rewards - Free Gift Cards - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Joy Rewards - Free Gift Cards published at the 'play' market has multiple vulnerabilities...

Make money & gift cards gCash - Dangerous filesystem permissions, Exported ContentProvider, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Make money & gift cards gCash published at the 'play' market has multiple vulnerabilities...

TapLoot - Free Gift Cards! - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application TapLoot - Free Gift Cards! published at the 'play' market has multiple vulnerabilities...

Gift Wallet - Free Reward Card - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Gift Wallet - Free Reward Card published at the 'play' market has multiple vulnerabilities...

GrabPoints - Free Gift Cards - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application GrabPoints - Free Gift Cards published at the 'play' market has multiple vulnerabilities...

FreeMyApps - Free Gift Cards - Exported components, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application FreeMyApps - Free Gift Cards published at the 'play' market has multiple vulnerabilities...

Cash Gift - Free Gift Cards - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Cash Gift - Free Gift Cards published at the 'play' market has multiple vulnerabilities...

AppBounty – Free gift cards - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application AppBounty – Free gift cards published at the 'play' market has multiple vulnerabilities...

Udemy: Able to view others' gifts on /gift/share URL, giftId is predictable, and easy to manipulate

I recently purchased a gift for a friend, and noticed the share URL gift ID was simply numeric. I managed to access other people's gifts simply by incrementing and decrementing the ID by 2, I was able to verify that the price was dropped to "Free", regardless of if I was logged in or not, and I w...

Chakra JavaScript Engine: Microsoft Open-Sources the Heart of Edge browser

Microsoft has announced the plans to open source the core components of its "Chakra" – the JavaScript engine behind the new Edge browser – to GitHub code-sharing and collaboration repository next month. The company made this announcement at the JSConf US Last Call conference in Florida this...

junodownload.com XSS vulnerability

Vulnerable URL: http://www.junodownload.com/gift/?formcarddesignid=3960202926vouchervalue=5countryid=180toname=fromname=toemail=toemailrepeat=8013028506deliverytimenow=deliverydate=" Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 08:38 GMT...

junodownload.com XSS vulnerability

Vulnerable URL: http://www.junodownload.com/gift/?formcarddesignid=3960202926vouchervalue=5countryid=180toname=fromname=" Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 08:38 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

jerseymikes.com XSS vulnerability

Vulnerable URL: https://www.jerseymikes.com/gift-cards/ Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:42 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 68617 Google Pagerank| 5 VIP website status:| No...

IC3 Issues Alert on Gift Card Scams

The Internet Crime Complaint Center IC3 has released an alert warning consumers of fraud around the resale of gift cards. The secondary gift card market has grown in recent years, and criminal activity has been identified on sites facilitating such exchanges. When purchasing gift cards, look for...

Threat Outbreak Alert RuleID14404: Email Messages Distributing Malicious Software on April 1, 2015

Medium Alert ID: 38153 First Published: 2015 April 1 13:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14404 may contain the following files: Name | Siz...

Airbnb: Generating Unlimited Free Travel Gift Invites | IDOR

After registration you can invite your friends to get some offer on there first trip. Notice that this system is flawed and attacker can generate as many invites he wants without going through the system at all. Original Invite link:...

CVE-2014-5735

The Buy A Gift aka com.wBuyAGift application 13529.90084 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Buy A Gift aka com.wBuyAGift application 13529.90084 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5735

The Buy A Gift (com.wBuyAGift) Android app version 13529.90084 does not verify SSL/X.509 certificates, allowing MITM attackers to spoof servers and capture sensitive data via crafted certificates. This is CVE-2014-5735; supported by NVD/NIST and related records in connected documents. No exploit ...

CVE-2014-5735

The Buy A Gift aka com.wBuyAGift application 13529.90084 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...