CVE-2014-5864

The Swish payments aka se.bankgirot.swish application 2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Paypal BBP #108 MOS - Persistent Web Vulnerability

Document Title: =============== Paypal BBP 108 MOS - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1049 PayPal Security UID: qw115bSN Release Date: ============= 2014-07-08 Vulnerability Laboratory ID VL-ID:...

Quick Paypal Payments 3.0 - Presistant XSS (0day)

No description provided by source. TITLE ===== Quick Paypal Payments - Persistent Cross Site Scripting Vulnerability AUTHOR ====== Zy0d0x BLOG ==== https://zy0d0x.com DATE ==== 10/08/2013 VENDOR ====== Quick Plugins - http://quick-plugins.com/ AFFECTED PRODUCT ================ Quick Paypal Paymen...

Bs Home_Classifieds Script SQL Injection Vulnerability

No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs HomeClassifieds Script Sqli Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL :http://www.brotherscripts.com...

Bs General_Classifieds Script SQL Injection Vulnerability

No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs GeneralClassifieds Script Sqli Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL...

iOS 8 Safari Browser Can Read Your Credit Card Details Using Device Camera

While shopping online we need to first surf through number of pages and then finally have to fill credit and debit cards details manually into the browser, which is the annoying for most of the user. But now the new Safari feature in iOS 8 solves this problem by integrating camera-based Credit an...

ProtonMail: 'NSA-Proof' End-to-End Encrypted Email Service

The Edward Snowden revelations triggered a large-scale movement worldwide towards deploying encryption across the Internet for secure services, which is something the government agencies like NSA and GCHQ have targeted repeatedly, as exemplified by abruptly shutting down Lavabit, a Texas-based...

PayPal Filter Bypass

Document Title: =============== Paypal Inc Bug Bounty 109 MOS - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1050 PayPal Security UID: Pq115cey Release Date: ============= 2014-05-14 Vulnerability Laboratory ID VL-ID:...

Threat Outbreak Alert: Fake Bank Account Information Email Messages on March 12, 2014

Medium Alert ID: 33306 First Published: 2014 March 12 17:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain bank payment details for the recipient. The text in the email message attempts to convince the recipient to open...

jakarta-commons-httpclient: missing connection hostname check against X.509 certificate name

It was found that Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows...

PayPal China Malicious Redirect

Document Title: =============== PayPal Inc Bug Bounty 65 China - Redirect Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=860 PayPal Security UID: rdbeeur Release Date: ============= 2013-11-17 Vulnerability Laboratory ID VL-ID:...

Quick Paypal Payments 3.0 - Presistant XSS (0day)

Exploit for php platform in category web applications TITLE ===== Quick Paypal Payments - Persistent Cross Site Scripting Vulnerability AUTHOR ====== Zy0d0x BLOG ==== https://zy0d0x.com DATE ==== 10/08/2013 VENDOR ====== Quick Plugins - http://quick-plugins.com/ AFFECTED PRODUCT ================...

Threat Outbreak Alert: Fake Financial Account Information Email Messages on October 25, 2013

Medium Alert ID: 31494 First Published: 2013 October 25 14:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain banking information from HSBC for the recipient. The text in the email message attempts to convince the...

Experian Sells Data to Identity theives

The credit bureau Experian appears to have sold an unknown amount of highly sensitive personal information to a Vietnamese national who maintained an online identity theft service, according to a long-running investigative report published by Krebs on Security reporter Brian Krebs. Experian, whic...

Quick Paypal Payments Cross Site Scripting

TITLE ===== Quick Paypal Payments - Persistent Cross Site Scripting Vulnerability AUTHOR ====== Zy0d0x BLOG ==== https://zy0d0x.com DATE ==== 10/08/2013 VENDOR ====== Quick Plugins - http://quick-plugins.com/ AFFECTED PRODUCT ================ Quick Paypal Payments Wordpress Plugin Version 3.0...

WordPress Plugin Quick Paypal Payments 3.0 - Presistant Cross-Site Scripting

WordPress Plugin Quick Paypal Payments 3.0 - Presistant Cross-Site Scripting TITLE ===== Quick Paypal Payments - Persistent Cross Site Scripting Vulnerability AUTHOR ====== Zy0d0x BLOG ==== https://zy0d0x.com DATE ==== 10/08/2013 VENDOR ====== Quick Plugins - http://quick-plugins.com/ AFFECTED...

Threat Outbreak Alert: Fake Payment Information Delivery Email Messages on September 20, 2013

Medium Alert ID: 30924 First Published: 2013 September 20 16:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain payment information from HSBC for the recipient. The message attempts to persuade the recipient to open the...

NSA Intelligence Agency spies on International Credit Card Transactions including Visa

"The truth is coming, and it cannot be stopped", Edward Snowden. The National Security Agency isn’t just snooping into phone and online communications. It also appears to be keeping a close eye on credit card transactions. New reports published by Der Spiegel exposed that The National Security...

Threat Outbreak Alert: Fake Payment Advice Email Messages on July 19, 2013

Medium Alert ID: 30149 First Published: 2013 July 19 18:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment advice for the recipient. The text in the email message attempts to convince the recipient to open the...

Bug Bounty to Reward Researchers with Redeemable Points

IntegraXor, a manufacturer of supervisory control and data acquisition SCADA equipment, announced last week that it would implement a bug bounty program offering points redeemable for company services to researchers that disclose security vulnerabilities in their IGX SCADA system. In most bug...