PayPal Inc BB #70 FR - Persistent Mail Vulnerability

Document Title: =============== PayPal Inc BB 70 FR - Persistent Mail Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=869 PayPal Security UID: Roc83bl Release Date: ============= 2014-09-25 Vulnerability Laboratory ID VL-ID:...

PayPal Inc BB #59 - Persistent Mail Encoding Vulnerability

Document Title: =============== PayPal Inc BB 59 - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=844 PayPal Security UID: CabdfGa Release Date: ============= 2014-09-23 Vulnerability Laboratory ID VL-ID:...

Information disclosure

The TIO MobilePay - Bill Payments aka com.tionetworks.mobile.android.tioclient application 1.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6639

The CVE-2014-6639 entry concerns the Android app TIO MobilePay – Bill Payments (com.tionetworks.mobile.android.tioclient) version 1.1.1, where SSL servers’ X.509 certificate verification is not performed. This lack of certificate validation allows man‑in‑the‑middle attackers to spoof servers and ...

CVE-2014-6639: Undefined Security Weakness

The TIO MobilePay - Bill Payments aka com.tionetworks.mobile.android.tioclient application 1.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5864

The Swish payments aka se.bankgirot.swish application 2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Swish payments aka se.bankgirot.swish application 2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5864

The Swish payments aka se.bankgirot.swish application 2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5864

The CVE-2014-5864 entry affects the Swish payments Android app (se.bankgirot.swish) version 2. The root cause is failure to validate X.509 certificates from SSL servers, enabling Man-in-The-Middle attackers to spoof servers and obtain sensitive data via a crafted certificate. The CPE/affected com...

CVE-2014-5864: Undefined Security Weakness

The Swish payments aka se.bankgirot.swish application 2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Paypal BBP #108 MOS - Persistent Web Vulnerability

Document Title: =============== Paypal BBP 108 MOS - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1049 PayPal Security UID: qw115bSN Release Date: ============= 2014-07-08 Vulnerability Laboratory ID VL-ID:...

Bs Home_Classifieds Script SQL Injection Vulnerability

No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs HomeClassifieds Script Sqli Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL :http://www.brotherscripts.com...

Quick Paypal Payments 3.0 - Presistant XSS (0day)

No description provided by source. TITLE ===== Quick Paypal Payments - Persistent Cross Site Scripting Vulnerability AUTHOR ====== Zy0d0x BLOG ==== https://zy0d0x.com DATE ==== 10/08/2013 VENDOR ====== Quick Plugins - http://quick-plugins.com/ AFFECTED PRODUCT ================ Quick Paypal Paymen...

Bs General_Classifieds Script SQL Injection Vulnerability

No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs GeneralClassifieds Script Sqli Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL...

iOS 8 Safari Browser Can Read Your Credit Card Details Using Device Camera

While shopping online we need to first surf through number of pages and then finally have to fill credit and debit cards details manually into the browser, which is the annoying for most of the user. But now the new Safari feature in iOS 8 solves this problem by integrating camera-based Credit an...

ProtonMail: 'NSA-Proof' End-to-End Encrypted Email Service

The Edward Snowden revelations triggered a large-scale movement worldwide towards deploying encryption across the Internet for secure services, which is something the government agencies like NSA and GCHQ have targeted repeatedly, as exemplified by abruptly shutting down Lavabit, a Texas-based...

PayPal Filter Bypass

Document Title: =============== Paypal Inc Bug Bounty 109 MOS - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1050 PayPal Security UID: Pq115cey Release Date: ============= 2014-05-14 Vulnerability Laboratory ID VL-ID:...

Threat Outbreak Alert: Fake Bank Account Information Email Messages on March 12, 2014

Medium Alert ID: 33306 First Published: 2014 March 12 17:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain bank payment details for the recipient. The text in the email message attempts to convince the recipient to open...

jakarta-commons-httpclient: missing connection hostname check against X.509 certificate name

It was found that Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service FPS merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows...

PayPal China Malicious Redirect

Document Title: =============== PayPal Inc Bug Bounty 65 China - Redirect Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=860 PayPal Security UID: rdbeeur Release Date: ============= 2013-11-17 Vulnerability Laboratory ID VL-ID:...