5924 matches found
Warning: Two Dangerous Ransomware Are Back – Protect Your Computers
Ransomware has been around for a few years but has become an albatross around everyone's neck—from big businesses and financial institutions to hospitals and individuals worldwide—with cyber criminals making millions of dollars. In just past few months, we saw a scary strain of ransomware attacks...
Researchers Find Phishing Site Encrypted with AES
Scammers chasing Apple credentials and payment card information have ramped up their efforts to hide their phishing page by encrypting it with AES. Researchers at Ring 0 Labs disclosed details about the operation last week, pointing out that the criminals behind this activity are buffering a fair...
CVE-2017-10069
Vulnerability in the Oracle Payment Interface component of Oracle Hospitality Applications subcomponent: Core. The supported version that is affected is 6.1.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payment Interface...
CVE-2017-10069
Vulnerability in the Oracle Payment Interface component of Oracle Hospitality Applications subcomponent: Core. The supported version that is affected is 6.1.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payment Interface...
Design/Logic Flaw
Vulnerability in the Oracle Payment Interface component of Oracle Hospitality Applications subcomponent: Core. The supported version that is affected is 6.1.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payment Interface...
CVE-2017-10069
The CVE-2017-10069 entry concerns Oracle Hospitality Applications’ Oracle Payment Interface, Core subcomponent, affected in version 6.1.1. The vulnerability allows a low-privileged attacker with network access over HTTP to obtain unauthorized access to data within the Oracle Payment Interface. Th...
CVE-2017-10069
Vulnerability in the Oracle Payment Interface component of Oracle Hospitality Applications subcomponent: Core. The supported version that is affected is 6.1.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payment Interface...
CVE-2017-10069
Vulnerability in the Oracle Payment Interface component of Oracle Hospitality Applications subcomponent: Core. The supported version that is affected is 6.1.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payment Interface...
Threat Outbreak Alert RuleID30103: Email Messages Distributing Malicious Software on August 7, 2017
Medium Alert ID: 54768 First Published: 2017 August 7 17:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30103 may contain the following files: Name | Si...
NiuShop_b2c_data_release has multiple vulnerabilities
NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . NiuShopb2cdatarelease exists to bypass the payment vulnerability , file upload vulnerability , arbitrary...
chromium-browser: ui spoofing in payments dialog
Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page...
vc movie app has a payment logic design flaw
vc movie app is a movie information software on the phone. The vc movie app has a payment logic design vulnerability. Attackers use the vulnerability to bypass the payment verification mechanism to modify the payment amount...
Hunan Ding Ding Easily Builds App with Multiple Vulnerabilities
Hunan Ding Ding Easily Build APP is an order-taking tool for engineers. Hunan Ding Ding Easy Build APP has arbitrary user registration, payment flaws and arbitrary password reset vulnerability. Attackers can use the vulnerability to register any cell phone number, modify any user order informatio...
Zomato: [www.zomato.com/dubai/gold] CRITICAL - Allowing arbitrary amount to become a GOLD Member
Hacker was able to find the internal testing Zomato Gold membership. I was able to purchase the PREMIUM GOLD MEMBERSHIP by selecting the amount of our own choice, here it required two conditions first is that you must have a valid premium membership. So, when I looked up the cost of the membershi...
Zomato: Restaurant payment information leakage
An endpoint was leaking banking information of restaurant owners: Bank Name, Account number etc. Thanks @nbsp for reporting this...
secure.onpay.ru Open Redirect vulnerability
Vulnerable URL: https://secure.onpay.ru/coupons/248aad1af7d346c8236e51bbfaa9b81a/savetoken?userurl=http://openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 31.07.2017 Latest check for patch:| 31.07.2017 09:58 GMT Vulnerability type:| Open Redirect Vulnerability status:|...
Micro Market Vendor Warns of Bankcard And Biometric Data Breach
Avanti Markets, which specializes in self-serve food kiosks typically located in company breakrooms, said an undisclosed number of its 1.5 million customers may have had their personal and bankcard data compromised along with stored biometric data. The company, based in Tukwila, WA, said on July ...
Self-Service Food Kiosk Vendor Avanti Hacked
Avanti Markets, a company whose self-service payment kiosks sit beside shelves of snacks and drinks in thousands of corporate breakrooms across America, has suffered of breach of its internal networks in which hackers were able to push malicious software out to those payment devices, the company...
Snapchat: [spectacles.com] Bypassing quantity limit in orders
Hi Snapchat team, In the https://www.spectacles.com the quantity of orders has limited for spectacles is 6 and for accessories is 10 according to help support page. But it can easily be manipulated by editing the URL. Problem originates from limiting the quantity of the items is with just the UI...