Lucene search
K

6 matches found

The Hacker News
The Hacker News
added 2026/05/08 3:8 p.m.8 views

Fake Call History Apps Stole Payments From Users After 7.3 Million Play Store Downloads

Cybersecurity researchers have discovered fraudulent apps on the official Google Play Store for Android that falsely claimed to offer access to call histories for any phone number, only to trick users into joining a subscription that provided fake data and incurred financial loss. The 28 apps hav...

5.8AI score
Exploits0
Securelist
Securelist
added 2026/05/06 9:30 a.m.2 views

Websites with an undefined trust level: avoiding the trap

Executive summary A suspicious website is a web resource that cannot be definitively classified as phishing, but whose activities are unsafe. Such sites manipulate users, tricking them into voluntarily transferring money for non-existent services, signing up for hidden subscriptions, or disclosin...

5.5AI score
Exploits0
Cvelist
Cvelist
added 2024/06/19 6:55 a.m.19 views

CVE-2024-1407 Paid Memberships Pro <= 2.12.10 - Cross-Site Request Forgery to Membership Modification

The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.12.10. This is due to missing or incorrect nonce validation on multiple functions. This makes it possibl...

5.4CVSS0.00201EPSS
Exploits0References5
WPVulnDB
WPVulnDB
added 2024/03/25 12:0 a.m.28 views

Paid Memberships Pro < 3.0 - Cross-Site Request Forgery

Description The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.12.10. This is due to missing nonce validation on the pmproliftersavestreamlineoption...

4.3CVSS6.2AI score0.09317EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2023/05/08 9:15 p.m.15 views

Design/Logic Flaw

Ghost is an app for new-media creators with tools to build a website, publish content, send newsletters, and offer paid subscriptions to members. Prior to version 5.46.1, due to a lack of validation when filtering on the public API endpoints, it is possible to reveal private fields via a brute...

5CVSS7.5AI score0.0717EPSS
Exploits0References3Affected Software1
Malwarebytes
Malwarebytes
added 2021/11/02 1:42 p.m.17 views

What is Twitch?

Twitch is primarily a site dedicated to live streaming content. It also offers the ability to chat with others in the Stream you happen to be in via text. The primary draw of Twitch streams is video games and e-sports, leading to the rise of many big name streamers and content creators. Is Twitch...

6.9AI score
Exploits0
Rows per page
Query Builder