CVE-2016-0253

Cross-site scripting XSS vulnerability in IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager FTM for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager FTM f...

CVE-2016-0253

CVE-2016-0253 is an XSS vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services on Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013. The issue arises from improper validation of user-supplied input, allowing a remote attacker to inj...

CVE-2016-0275

CVE-2016-0275 affects IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services on Multi-Platform versions 2.1.1.2 and 3.0.0.x before fp0013. The issue enables local attackers to obtain sensitive information via cacheable HTTPS responses stored on the...

CVE-2016-0253: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager FTM for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager FTM f...

PT-2018-4599

Name of the Vulnerable Software and Affected Versions Financial Transaction Manager FTM for ACH Services for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013 Financial Transaction Manager FTM for Check Services for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013 Financi...

PT-2018-4595

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013 IBM Financial Transaction Manager FTM for Check Services for Multi-Platform versions 2.1.1.2 through 3.0.0.x before fp0013...

CVE-2016-0275: Exposure of Sensitive Information to an Unauthorized Actor

IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager FTM for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager FTM for Corporate Payment Services CPS for...

g2g.com XSS vulnerability

Open Bug Bounty ID: OBB-575476 Description| Value ---|--- Affected Website:| g2g.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Zomato: [www.zomato.com] Getting a complimentary dessert [Zomato Treats] on ordering a Meal at no cost

Go to order food tab and select any restaurant that delivers online. 2. Add Zomato Treat Subscription to cart. 3. Add more items to cart to fulfil the minimum order requirement for that restaurant. 4. Click on Continue and proceed to pay online. 5. While paying online I faced the issue that...

memcached, now with extortion!

Over the past week, memcached reflection attacks have taken the DDoS scene by storm. With several attacks hitting organizations across many industries, including a record breaking 1.3Tbps attack against an Akamai customer. Akamai has observed a new trend in extortion attempts using memcached...

Bookly #1 WordPress Booking Plugin Lite Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's suite of blogging platforms developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.Bookly 1 WordPress Booking Plugin Lite is a lite version of the schedule management plugin used in... A cross-site...

Threat Outbreak Alert RuleID32091: Email Messages Distributing Malicious Software on February 21, 2018

Medium Alert ID: 56894 First Published: 2018 February 21 20:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32091 may contain the following files: Name |...

Threat Outbreak Alert RuleID32012: Email Messages Distributing Malicious Software on February 20, 2018

Medium Alert ID: 56874 First Published: 2018 February 20 16:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32012 may contain the following files: Name |...

Starbucks: Able to purchase a gift card with any amount

Description There is a vulnerability in card.starbucks.com.sg that allows an attacker to modify the purchasing value of a starbucks gift card such that he is paying the minimum amount for the maximum value of the gift card. Attack Summary An attacker is able to pay $0.01 for a $100 gift card and...

CVE-2018-6891

Bookly 1 WordPress Booking Plugin Lite before 14.5 has XSS via a jQuery.ajax request to ng-paymentdetailsdialog.js...

PT-2018-17806 · WordPress · Bookly

Name of the Vulnerable Software and Affected Versions: Bookly 1 WordPress Booking Plugin Lite versions prior to 14.5 Description: The issue concerns a cross-site scripting XSS flaw. It is triggered by a jQuery.ajax request to the ng-payment details dialog.js file. Recommendations: For Bookly 1...

PHPCMS backend has SQL injection vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. A SQL injection vulnerability exists in the page phpcms/modules/pay/payment.php in the backend of PHPCMS, which can be exploited ...

Threat Outbreak Alert RuleID31922: Email Messages Distributing Malicious Software on February 6, 2018

Medium Alert ID: 56675 First Published: 2018 February 6 17:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31922 may contain the following files: Name |...

Boomerang spam bombs Malwarebytes forum—not a smart move

Tech support scammers are generally not the best and brightest. As such, they will occasionally post ads for their fake companies in the comment sections here or on the Malwarebytes forums. Last week, however, scammers struggled with configuring their spambots, resulting in spam bombs on the foru...

Scarab ransomware: new variant changes tactics

The Scarab ransomware was discovered in June 2017. Since then, several variants have been created and discovered in the wild. The most popular or widespread versions were distributed via the Necurs botnet and initially written in Visual C compiled. However, after unpacking, we've found that anoth...