5929 matches found
Kids on the Web in 2020
Technology is what is saving us from a complete change in the way of life in a world of a raging pandemic. It keeps the educational process going, relieves the shortage of human communication and helps us to live life as fully as possible given the isolation and social distancing. Many adults, an...
Mobile payment app BHIM leaked financial data of 7 million Indians
By Waqas Bharat Interface for Money BHIM, India’s emerging new e-payments platform has... This is a post from HackRead.com Read the original post: Mobile payment app BHIM leaked financial data of 7 million Indians...
Logic flaw vulnerability exists in cmseasy (CNVD-2020-32605)
CmsEasy is a website content management system based on PHP+Mysql architecture and a PHP development platform. CmsEasy has a logic flaw vulnerability that can be exploited by attackers to modify payment amounts...
h1-ctf: [H1-2006 2020] I made the CEO's bounty payment!
^FLAG^736c635d8842751b8aafa556154eb9f3$FLAG$ I will write the details in comment. Impact I have headache now...
Logic Flaw Vulnerability in Shop7z Online Mall Shopping System Fashion Edition
Shop7z belongs to Shijiazhuang Zhenhong Network Technology Co., Ltd. and has been committed to enterprise Internet application related services since 2004. A logic flaw vulnerability exists in the fashion version of the Shop7z online mall shopping system. An attacker can exploit the vulnerability...
Crooks Tap Google Firebase in Fresh Phishing Tactic
A series of phishing campaigns using Google Firebase storage URLs have surfaced, showing that cybercriminals continue to leverage the reputation of Google’s cloud infrastructure to dupe victims and skate by secure email gateways. Google Firebase is a mobile and web application development platfor...
CVE-2020-6483
Insufficient policy enforcement in payments in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...
UBUNTU-CVE-2020-6483
Insufficient policy enforcement in payments in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...
Design/Logic Flaw
Insufficient policy enforcement in payments in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...
CISA, IRS, USSS, and Treasury Release Joint Alert on Scams Related to Coronavirus Economic Impact Payments
The Cybersecurity and Infrastructure Security Agency CISA, U.S. Department of the Treasury, Internal Revenue Service IRS, and United States Secret Service USSS have released a Joint Alert with mitigations to help Americans avoid scams related to coronavirus economic impact payments—particularly...
Ukrainian Police Arrest Hacker Who Tried Selling Billions of Stolen Records
The Ukrainian police have arrested a hacker who made headlines in January last year by posting a massive database containing some 773 million stolen email addresses and 21 million unique plaintext passwords for sale on various underground hacking forums. In an official statement released on...
Google Chrome Security Bypass Vulnerability (CNVD-2020-29234)
Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome prior to version 83.0.4103.61 that stems from insufficient policy enforcement during the payment process. The vulnerability can be exploited by an attacker to bypass security...
Brazil’s cosmetic giant Natura leaked 192 million records with payment data
By Waqas It's a massive security failure by The Natura & Co Group. This is a post from HackRead.com Read the original post: Brazil's cosmetic giant Natura leaked 192 million records with payment data...
EasyJet Hackers Take Off with Travel Details for 9M Customers
European budget airline EasyJet has been hacked, with attackers making off with personal details for 9 million customers. It was, the airline said, a “highly sophisticated attack” that exposed the email addresses and travel itineraries of the victims, along with payment-card information for 2,208...
Brazil's Biggest Cosmetic Brand Natura Exposes Personal Details of Its Users
Brazil's biggest cosmetics company Natura accidentally left hundreds of gigabytes of its customers' personal and payment-related information publicly accessible online that could have been accessed by anyone without authentication. SafetyDetective researcher Anurag Sen last month discovered two...
Brazil's Biggest Cosmetic Brand Natura Exposes Personal Details of Its Users
Brazil's biggest cosmetics company Natura accidentally left hundreds of gigabytes of its customers' personal and payment-related information publicly accessible online that could have been accessed by anyone without authentication. SafetyDetective researcher Anurag Sen last month discovered two...
Texas Courts Won't Pay Up in Ransomware Attack
A ransomware attack has hit the information technology office that supports Texas appellate courts and judicial agencies, leading to their websites and computer servers being shut down. The office said that it will not pay the ransom requested by the cybercriminals. Specifically affected is the...
SQL Injection Vulnerability in the Payment Platform of Harbin Xinzhongxin Electronics Co.
Harbin Xinzhongxin Electronic Co., Ltd. is a payment platform solution provider. A SQL injection vulnerability exists in the payment platform of Harbin Xinzhongxin Electronics Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...
RevenueWire to pay $6.7 million to settle FTC charges
What can you do as a scammer when no legitimate payment provider wants to process your payments anymore? Or, what if you are growing sick and tired of these same payment providers reimbursing disgruntled customers who claim that your products didn't fix computers, like—you know—you said they woul...
