secure.ryzom.com XSS vulnerability

Open Bug Bounty ID: OBB-47360 Description| Value ---|--- Affected Website:| secure.ryzom.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Payment Gateways Caller for WP e-Commerce 0.1.0 - load_merchant Parameter Traversal Local file Inclusion

The Payment Gateways Caller for WP e-Commerce WordPress plugin was affected by a loadmerchant Parameter Traversal Local file Inclusion security vulnerability...

WooCommerce SagePay Direct Payment Gateway 0.1.6.6 - pages/3DComplete.php Multiple Parameter Reflected XSS

The sagepay-direct-for-woocommerce-payment-gateway WordPress plugin was affected by a pages/3DComplete.php Multiple Parameter Reflected XSS security vulnerability...

PayPal payment defects caused by the lied to pay the amount of vulnerability-vulnerability warning-the black bar safety net

Recently, white hat Jan Kechel found PayPal there lied to pay the amount of the vulnerability and proof of this may be and is utilized to carry out the fraud. Jan Kechel given in the Demo:the http://lvps91-250-100-5.dedicated.hosteurope.de:43926/ The author on the page gives detailed steps and...

New Kronos Banking Malware Advertised On Russian Forums

Criminals are advertising a new banking Trojan on Russian forums, one going for a hefty price and being marketed as a method of evading detection and analysis. To date, however, security researchers have yet to obtain a sample of Kronos, which is available on a few forums for pre-order at a cost ...

Threat Outbreak Alert RuleID10631: Email Messages Distributing Malicious Software on July 11, 2014

Medium Alert ID: 34905 First Published: 2014 July 14 13:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10631 may contain the following files: Name | Siz...

BrutPOS Botnet Compromises insecure RDP Servers at Point-of-Sale Systems

Cyber criminals are infecting thousands of computers around the world with malware and are utilizing those compromised machines to break into Point-of-Sale PoS terminals using brute-force techniques, and the attackers have already compromised 60 PoS terminals by brute-force attacks against...

Paypal BB #108 MOS - Bypass & Persistent Vulnerability

Document Title: =============== Paypal BB 108 MOS - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1049 PayPal Security UID: qw115bSN Video: http://www.vulnerability-lab.com/getcontent.php?id=1273 Video Demonstration:...

Paypal BBP #108 MOS - Persistent Web Vulnerability

Document Title: =============== Paypal BBP 108 MOS - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1049 PayPal Security UID: qw115bSN Release Date: ============= 2014-07-07 Vulnerability Laboratory ID VL-ID:...

Brazilian Payment Fraud Campaign Steals Billions

UPDATE–Hackers are targeting Brazil’s Boleto payment system, the second most popular payment method in the country, and have conducted hundreds of thousands of fraudulent transactions, though researchers differ over how much money has been stolen. Formally known as Boleto Bancario, Boletos are...

CVE-2014-4549

Multiple cross-site scripting XSS vulnerabilities in pages/3DComplete.php in the WooCommerce SagePay Direct Payment Gateway plugin before 0.1.6.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 MD or 2 PARes parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in pages/3DComplete.php in the WooCommerce SagePay Direct Payment Gateway plugin before 0.1.6.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 MD or 2 PARes parameter...

CVE-2014-4549

Multiple cross-site scripting XSS vulnerabilities in pages/3DComplete.php in the WooCommerce SagePay Direct Payment Gateway plugin before 0.1.6.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 MD or 2 PARes parameter...

CVE-2014-4549

CVE-2014-4549 affects the WordPress plugin WooCommerce SagePay Direct Payment Gateway (pages/3DComplete.php) with XSS via the (1) MD and (2) PARes parameters. Root cause is reflected HTML/script injection in that PHP page, leading to arbitrary script execution if exploited. Public sources indicat...

phpCoupon Remote Payment Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25116/info phpCoupon is prone to a remote payment-bypass vulnerability because the application fails to properly secure PayPal payment transactions. Successfully exploiting this issue allows remote attackers to perform...

OSCommerce 2.1/2.2 Checkout_Payment.PHP Error Output Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7155/info Error output is not sufficiently sanitized of HTML and script code by osCommerce. This may allow for cross-site scripting attacks as remote users could create a malicious link to a site hosting osCommerce which...

osData <= 2.08 Modules Php121 Local File Inclusion Vulnerability

No description provided by source. ========================================================================= osData = 2.08 Modules Php121 Local File Include Vulnerability ========================================================================= Found by : Cold z3ro , http://www.Hackteach.org/cc/...

amember 3.1.7 - (xss/sql/hi) Multiple Vulnerabilities

No description provided by source. AMember - Multiple Vulnerabilities Version Affected: 3.1.7 Apr-10-2009 newest Info: aMember is a flexible membership and subscription management PHP script. It has support for PayPal, BeanStream, 2Checkout, NoChex, VeriSign PayFlow, Authorize.Net, PaySystems,...

SAS Hotel Management System user_login.asp SQL Injection Vulnerability

No description provided by source. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ 0 0 \ \ /\ /\ \ \ \ /\ \ \ /\ /\ \ \ \ \ \ \ / 1 1 \ \ \ \\ \ \ /\ \...

Online Classified System Script SQL Injection and XSS Vulnerabilities

No description provided by source. 1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Online Classified System Script SQLi and XSS Vulnerable Vendor...