WeChat Pay SDK XXE Injection

Hi List, Title XXE in WeChat Pay Sdk WeChat leave a backdoor on merchant websites ------------------------------------------ Background aMobile payments surge to $9 trillion a year, changing how people shop, borrowaeven panhandlea, as WSJ.com once reported. As a payment security researcher, I...

Zomato: Unauthorized update of merchants' information via /php/merchant_details.php

Hello! I discovered an interesting file : https://www.zomato.com/php/merchantdetails.php If I add in post content : action=update-merchant&merchantid=95292&type=1&[email protected]&[email protected]&name=update With the report 255648, I was able to create a merchant, I should use th...