Lightning Network Daemon Security Vulnerability

A security vulnerability exists in Lightning Network Daemon lnd versions prior to 0.7 that stems from incorrect access control in the program. An attacker could exploit the vulnerability by not paying or underpaying the total cash amount of a transaction...

h1-ctf: h1-ctf writeup , finally paid the payments by chaining multiple bugs

Summary: Ultimate aim is to pay the payments of hackerone using bounty pay with no use privileges at starting. Given scope is : .bountypay.h1ctf.com Enumerated subdomains are : 1. www.bountypay.h1ctf.com 2. app.bountypay.h1ctf.com 3. staff.bountypay.h1ctf.com 4. api.bountypay.h1ctf.com 5...

pay-it-less.co.uk Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1147344 Security Researcher ELProfesor Helped patch 2814 vulnerabilities Received 8 Coordinated Disclosure badges Received 107 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting pay-it-less.co.uk...

dpd-paypal-ap (>=0.0.1, <=0.0.9), paypal-pay (0.1.1) potentially affected by CVE-2020-7643 via paypal-adaptive (>=0.1.1, <=0.4.2)

paypal-adaptive NPM version =0.1.1, =0.0.1, =0.0.9 - paypal-pay 0.1.1 Source cves: CVE-2020-7643 Source advisory: SNYK:JS-PAYPALADAPTIVE-565089...

pay-stub-now.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1137364 Security Researcher geeknik Helped patch 8696 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting pay-stub-now.com website a...

WordPress Event-Registration 5.43 Arbitrary File Upload

Exploit Title : WordPress Event-Registration Plugins 5.43 Arbitrary File Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 30/03/2020 Vendor Homepage : wp-event-organiser.com Software Links : captainform.com/wordpress-event-registration-plugin/...

SQL Injection Vulnerability in php Simple Sweeping Code Payment Education Fee System in***.php

php Simple Sweep Pay Education Fee System is a query and fee software developed in Php+MySql. php simple code payment education fee system in.php SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-40822)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A security vulnerability exists in Samsung mobile devices, which can be exploited by attackers to bypass factory settings recovery protection FRP with the help of t...

CVE-2019-20543

An issue was discovered on Samsung mobile devices with P9.0 software. Attackers can bypass Factory Reset Protection FRP via SamsungPay mini. The Samsung ID is SVE-2019-15090 November 2019...

CVE-2019-20543

An issue was discovered on Samsung mobile devices with P9.0 software. Attackers can bypass Factory Reset Protection FRP via SamsungPay mini. The Samsung ID is SVE-2019-15090 November 2019...

SQL Injection Vulnerability in Shipping 100 System co***.php Page

Shipping 100 System is a virtual goods autoship system/article pay to read system. A SQL injection vulnerability exists in the co.php page of the Shipment 100 system, which can be exploited by attackers to obtain sensitive information from the database...

Razer: SQL Injection in https://api-my.pay.razer.com/inviteFriend/getInviteHistoryLog

The tester determined the Razer Pay API server was vulnerable to a SQL injection that could allow the exposure of user information. Razer Fintech appreciates the clear and detailed PoC...

Arbitrary File Deletion Vulnerability in Shipping 100 Virtual Goods Autoship System

Shipping 100 Virtual Goods Autoship System is a virtual goods autoship system/article pay to read system. Ship 100 Virtual Goods Autoship System has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files...

Razer: Insecure HostnameVerifier within WebView of Razer Pay Android (TLS Vulnerability)

The tester discovered the Razer Pay Android application was vulnerable to a client side hijack which could have allowed the capture of important user data. Razer Fintech thanks the tester for their clear PoC...

Razer: RXSS at https://api.easy2pay.co/inquiry.php via txid parameter.

The tester discovered a reflected XSS on an API server related to Razer Pay TH. Note this is not a site that users will typically visit via a web browser front end. Razer thanks the tester for his diligence and the clear report...

Shipment 100 system has a reinstallation vulnerability

Shipping 100 System is a virtual goods autoship system/article pay to read system. A reinstallation vulnerability exists in Shipment 100 System, which can be exploited by an attacker to reinstall the system...

Razer: [Razer Pay Mobile App] Broken access control allowing other user's bank account to be deleted

The Razer Pay MY backend API had an access control vulnerability which would allow a client to delete the account of other users by varying the ID. Although an adversary could not target a specific individual by name, they could affect the integrity of the Razer Pay system. This was fixed in...

Razer: Improper Authorization at https://api-my.pay.razer.com/v1/trxDetail?trxId=[Id] allowing unauthorised access to other user's transaction details

The tester determined that the Razer Pay backend server could be exploited to obtain transaction details from another user. Razer Fintech appreciates the detailed report and clear PoC...

Razer: [Razer Pay Mobile App] IDOR within /v1_IM/friends/queryDrawRedLog allowed unauthorised access to read logs

The tester determined the Razer Pay MY server was vulnerable to unauthorized access of certain log file information due to an exposed signature in the Razer Pay Android application. Razer Fintech appreciates the clear and detailed report...

Razer: [Razer Pay] Broken Access Control at /v1/verifyPhone/ allows enumeration of usernames and ID information

The tester discovered an API endpoint with insufficient access control that could allow an adversary to obtain user name and phone number information. Razer Fintech thanks the tester for his clear PoC and diligence in helping us secure our customers' information...