Payments, Wallet & Recharge - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Payments, Wallet & Recharge published at the 'play' market has multiple vulnerabilities...

Ola Money - Wallet payments - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Ola Money - Wallet payments published at the 'play' market has multiple vulnerabilities...

netapp-payments.com Open Redirect vulnerability

Vulnerable URL: http://www.netapp-payments.com/store/netapp/enUS/RedirectToLandingPage/pgm.95708900?landingpage=http%3A%2F%2Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...

BHIM App — How to Send & Receive Money with UPI

After the lack of supply of cash in India following its Prime Minister step to remove high-denomination banknotes from circulation in November 2016, the country is moving a step closer towards becoming a cashless economy with the launch of Unified Payment Interface UPI. Unified Payment Interface...

tinkoff.ru XSS vulnerability

Vulnerable URL: https://www.tinkoff.ru/payments/?666alert'OPENBUGBOUNTY'...

Swish payments - Certificates or keys found, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application Swish payments published at the 'play' market has multiple vulnerabilities...

Experts Explain How Hackers Can Hack Your Credit Cards In Seconds

As India attempts an upgrade to a cashless society, cyber security experts have raised serious concerns and revealed how to find credit card information – including expiration dates and CVV numbers – in just 6 Seconds. And what's more interesting? The hack uses nothing more than guesswork by...

Google Fixes 12 High-Severity Vulnerabilities In Chrome Browser

Google is urging Windows, Mac and Linux users to update their Chrome browsers to fix multiple vulnerabilities that could allow malicious third parties to take control of targeted systems. Released Thursday, Chrome version 55.0.2883.75 for Windows, Mac, and Linux fixes those security issues. It al...

CVE-2016-3060

Payments Director in IBM Financial Transaction Manager FTM for ACH Services, Check Services, and Corporate Payment Services CPS 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to conduct clickjacking attacks via a crafted web site...

CVE-2016-3060

Payments Director in IBM Financial Transaction Manager FTM for ACH Services, Check Services, and Corporate Payment Services CPS 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to conduct clickjacking attacks via a crafted web site...

CVE-2016-3060: Improper Access Control

Payments Director in IBM Financial Transaction Manager FTM for ACH Services, Check Services, and Corporate Payment Services CPS 3.0.0.x before fp0015 and 3.0.1.0 before iFix0002 allows remote authenticated users to conduct clickjacking attacks via a crafted web site...

Coinbase: Authentication Issue

Hello there, I noticed while creating Recurring payment while 2FA is enabled it asks a user to enter verification code. So when someone confirm the Reccuring payment a request is sent to : POST /recurringpayments/58087a3d6861ee015644fc48/confirm HTTP/1.1 Host: beta.coinbase.com User-Agent:...

Joomla com_registrationpro SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Joomla comregistrationpro SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:index.php?option=comregistrationpro Vendor Homepage : http://www.joomlashowroom.com/ version : 3.2.12 - 3.2.10 Tested on: BACKBOX...

Ninety percent of a Bank online system has security vulnerabilities-vulnerability warning-the black bar safety net

Smart home devices, routers, cell phones, street common vending machines...... Life time may contact to the smart devices are likely to encounter a hacker to crack, facing security issues. Yesterday, in the XCon security focus information security technology summit sponsored by the“XPwn future...

Joomla Registration Pro 3.2.12 SQL Injection

| / \ | \ / | | | | | / | \ / / \ / \ | | | | | | || | | | | | = 5.0 boolean-based blind - Parameter replace Payload: option=comregistrationpro&view=calendar&Itemid=27&...

Sam Pfanstiel Appointed Director, Solution Architecture for Payments

Coalfire today announced Sam Pfanstiel has joined the company as the Director of Solution Architecture for Payments. Pfanstiels experience spans solution engineering and consulting as well as research and development positions...

Ransomware Activity Spikes in March, Steadily increasing throughout 2016

UPDATE June 15, 2016: This post has been updated to include new data on ransomware activity, which is also now broken down by region. Cyber extortion for financial gain is typically carried out in one of two ways. The first method is a business disruption attack – a category we discussed at lengt...

Empty DDoS Threats Still Net Attackers $100,000

With some members of the so-called Armada Collective in jail, another actor has decided to co-opt their technique of sending threatening DDoS extortion messages to businesses worldwide. Only difference is, this group isn’t following through with its threat, and it’s still collecting serious money...

IBM Financial Transaction Manager for Corporate Payment Services Cross-Site Request Forgery Vulnerability

IBM Financial Transaction Managerfor Corporate Payment Services is a financial transaction manager product that focuses on monitoring, tracking, and reporting financial payments and transactions. A cross-site request forgery vulnerability exists in IBM FTM for Corporate Payment Services on multip...

codeology.braintreepayments.com XSS vulnerability

Vulnerable URL: http://codeology.braintreepayments.com/?url=" Details: Description| Value ---|--- Patched:| Yes, at 14.04.2016 Latest check for patch:| 14.04.2016 17:10 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 V...