CVE-2021-40908

The CVE-2021-40908 issue affects Sourcecodester Purchase Order Management System v1.0, via Login.php where the username parameter is vulnerable to SQL injection. The underlying root cause is improper handling/validation of externally supplied SQL statements, enabling an attacker to run arbitrary ...

CVE-2021-40908

SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...

Sourcecodester Purchase Order Management System SQL注入漏洞

Sourcecodester Purchase Order Management System is a simple purchase order management system used to manage the purchase order records of a particular company. SQL injection vulnerability exists in Sourcecodester Purchase Order Management System, which Sourcecodester Purchase Order Management...

MixinPurchase:shareKey allows to generate keys without purchasing

Handle GiveMeTestEther Vulnerability details Impact the shareKey function allows a user to share some time with another user that doesn't already has/had a key and this generates a new key. This even allows to generate more keys than maxNumberOfKeys. attacker generates a lot of EOA adresses, buys...

Retail Data Needs Better Security in a Contextual World

Do you remember the first time you made an online purchase? Me neither. I’ve made so many online purchases over the years, and I’ve probably made more in the past 18 months than in the past 5 years combined...

CVE-2021-26786

An issue was discoverered in in customercentric-selling-poland PlayTube, allows authenticated attackers to execute arbitrary code via the purchace code to the config.php...

PlayTube 代码问题漏洞

PlayTube is a PHP-based video sharing platform. A code issue vulnerability exists in PlayTube, which stems from an error in the purchase in the product config.php file. The vulnerability can be exploited to execute arbitrary code...

How to build a password cracking rig during a worldwide chip shortage

… and keep a domain password auditing service online. Making money on GPUs, the hard way… At PTP we had a fairly decent GPU password cracking box called Titan. It used 4×1080 GPUs and had an NTLM hash rate of around 180GH/s. Several years ago I realised that the box was sitting idle much of the...

CVE-2020-18477

SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message concontent field...

CVE-2020-18477

SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message concontent field...

Sql injection

SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message concontent field...

CVE-2020-18477

SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message concontent field...

Baidu Love Sourcing Seller APP has information leakage vulnerability

Baidu Love Purchase Seller App is a client application that facilitates sellers to conveniently handle customer information. Baidu Love Purchase Seller App has an information leakage vulnerability that can be exploited by attackers to backup the app and obtain sensitive information...

Users can avoid paying borrowing interest after the fyToken matures

Handle shw Vulnerability details Impact According to the protocol design, users have to pay borrowing interest when repaying the debt with underlying tokens after maturity. However, a user can give his vault to Witch and then buy all his collateral using underlying tokens to avoid paying the...

Reddit: IDOR to pay less for coin purchases on oauth.reddit.com via /api/v2/gold/paypal/create_coin_purchase_order in `order_id` parameter

Summary: This vulnerability consist of modifying the PayPal transaction ID to buy a big coin pack but paying the small price for it. Impact: The only impact here could be that you don't earn the money you deserve, and users can offer a lot of presents to other users, breaking the magic of the...

Google Argentina domain bought by a random citizen for $5

By Deeba Ahmed A random Argentinian bought the official Google Argentina domain for just $5 and as a result, the site was offline in the country for hours. This is a post from HackRead.com Read the original post: Google Argentina domain bought by a random citizen for $5...

Fiserv Forgets to Buy Domain It Used as System Default

Fiserv, a multi-billion-dollar cybersecurity tech provider for financial institutions, forgot to buy the domain used as a default in their systems’ email communications, according to a report. The blunder could have exposed its clients’ user information to anyone with a few bucks to buy the domai...

Covid-19 Vaccine Scams Spread Under Facebook's Watch

Don’t use an iTunes gift card to purchase doses of the vaccine online...

Nespresso smart cards can be exploited for unlimited coffee

By Habiba Rashid Let us imagine that your Nespresso smart card had no limit to how much coffee you can buy with it. A little too convenient, isn’t it? This is a post from HackRead.com Read the original post: Nespresso smart cards can be exploited for unlimited coffee...

MStore API < 3.2.0 - Authentication Bypass With Sign In With Apple

The plugin had an authentication bypass with Sign In With Apple allowing unauthenticated users to recover an authentication cookie with only an email address. The plugin must have a valid purchase code for the request to work curl -X GET --header 'Content-Type: application/json' --header 'Accept:...