Coronavirus ‘Financial Relief’ Phishing Attacks Spike

Researchers are warning of an upward surge in social-engineering lures in malicious emails that promise victims financial relief during the coronavirus pandemic. The slew of campaigns piggy-back on news of governments mulling financial relief packages, in response to the economic stall brought on...

Marriott Suffers Second Breach Exposing Data of 5.2 Million Hotel Guests

International hotel chain Marriott today disclosed a data breach impacting nearly 5.2 million hotel guests, making it the second security incident to hit the company in recent years. "At the end of February 2020, we identified that an unexpected amount of guest information may have been accessed...

HackerOne: Login CSRF vulnerability on hackerone.com

Summary Hi. We found a CSRF token bypass on the Hacker One login page. So, this report describes Hacker One login CSRF Token Bypass. Exploitation process Hacker One uses the authenticitytoken token during login to prevent CSRF. However, the authenticitytoken token is not properly verified, so an...

Tupperware Cyberattack Stores Away Customer Payment Cards

Cybercriminals hacked the official website of Tupperware, the popular food container giant, injecting a payment card skimmer into its checkout page in hopes of stealing the credit-card details of online customers. The attackers targeted the official Tupperware.com website, which averages close to...

The Wawa Breach: 30 Million Reasons to Try Dark Web Monitoring

We’re all getting a little more worldly wise to the dangers that lurk around every corner of our digital lives. We know that the flipside of being able to shop, chat, bank and share online at the push of a button is the risk of data theft, ransomware and identity fraud. That’s why we protect our...

5iSNS content payment system is vulnerable to reloading

5iSNS content payment system is a home-grown , small , stable , support in the large amount of data still maintain a high load capacity of the SNS open source system . 5iSNS content payment system reloading vulnerability , attackers can use the vulnerability to reload the system...

Bitcoin Core Input Validation Error Vulnerability

Bitcoin Core is an open source client for verifying the validity of blockchain transactions. A security vulnerability exists in versions of Bitcoin Core prior to 0.14 that stems from an automated system that relies solely on SPV proofs to validate transactions. An attacker could exploit the...

Magecart Cyberattack Targets NutriBullet Website

A faction under the Magecart umbrella, Magecart Group 8, targeted the website of the blender manufacturer, NutriBullet, in an attempt to steal the payment-card data of its online customers. Yonathan Klijnsma, threat researcher with RiskIQ, said in a Wednesday post that a JavaScript web skimmer co...

Magecart Cyberattack Targets NutriBullet Website

A faction under the Magecart umbrella, Magecart Group 8, targeted the website of the blender manufacturer, NutriBullet, in an attempt to steal the payment-card data of its online customers. Yonathan Klijnsma, threat researcher with RiskIQ, said in a Wednesday post that a JavaScript web skimmer co...

TrueFire Guitar Tutoring Website Suffers Magecart-style Credit Card Breach

Online guitar tutoring website TrueFire has apparently suffered a 'Magecart' style data breach incident that may have potentially led to the exposure of its customers' personal information and payment card information. TrueFire is one of the popular guitar tutoring websites with over 1 million...

TrueFire Guitar Tutoring Website Suffers Magecart-style Credit Card Breach

Online guitar tutoring website TrueFire has apparently suffered a 'Magecart' style data breach incident that may have potentially led to the exposure of its customers' personal information and payment card information. TrueFire is one of the popular guitar tutoring websites with over 1 million...

Logic flaws and vulnerabilities in the campus fee payment platform of Beijing Dike Yuanwang Technology Co.

Ltd. specializes in the research, development and integration of one card system and campus payment platform. A logic flaw exists in the campus payment platform of Beijing Dike Yuanwang Technology Co., Ltd. that can be exploited by an attacker to reset a user's password and gain access to the...

Logic Flaw Vulnerability in LJCMSshop of Beijing Liang Jing Zhi Cheng Technology Co.

Liangjing Mall online shopping system is a set of multi-functional online store system that can fit different types of goods and is super flexible. A logic flaw vulnerability exists in LJCMSshop of Beijing Liangjing Zhicheng Technology Co., Ltd, which can be exploited by attackers to modify the...

CVE-2017-12842

Bitcoin Core before 0.14 is vulnerable to an SPV proof manipulation flaw. An attacker can craft an ostensibly valid SPV proof for a payment to a victim’s SPV wallet even if the payment never occurred, potentially misleading the wallet into accepting non-existent transactions. The attack cost is d...

CVE-2017-12842

Removed by vendor...

Shanghai ShangPai Network Technology Co., Ltd. ECShop suffers from a flawed payment logic vulnerability

ECShop is a B2C classic open source mall system. Shanghai ShangPai Network Technology Co., Ltd ECShop there is a payment logic flaw vulnerability, attackers can use the vulnerability to modify the amount of goods...

Security Bulletin: Vulnerability in IBM Java Runtime affect Financial Transaction Manager for Corporate Payment Services v2.1.1

Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 7 used by Financial Transaction Manager for Corporate Payment Services v2.1.1. Financial Transaction Manager for Corporate Payment Services FTM CPS v2.1.1 has addressed the applicable CVE.brIf you run your own Java code...

Update 15.4 for Microsoft Dynamics 365 Business Central 2019 Release Wave 2 (Application Build 15.4.41345, Platform Build 15.0.41271)

None None...

CmsEasy has a logic flaw vulnerability

CmsEasy is a website content management system based on PHP+Mysql architecture and a PHP development platform. CmsEasy has a logic flaw vulnerability that can be exploited by attackers to modify payment amounts...

Multiple vulnerabilities in OurPHP

OurPHP is a web content management system developed using the PHP language. OurPHP has multiple vulnerabilities that can be exploited by attackers to obtain sensitive information and issue refund requests without payment...