SQL Injection Vulnerability in Purchase Frontend ge***.aspx Page of Purchase System

Purchase system Purchase is a purchasing management system features include: product requisitioning, warehousing, inventory counts, data reports and more. A SQL injection vulnerability exists in the front-end ge.aspx page of Purchase, which can be exploited by attackers to obtain sensitive...

Mail.ru: Make user buy items via clickjacking possibility

Clickjacking attack could allow to force user to buy some item on lootdog.io...

mooSocial Store 2.6 SQL Injection

Exploit Title: mooSocial Store Plugin 2.6 - SQL Injection Exploit Author: Andrea Bocchetti Date: 2018-08-28 Google Dork: N/A - Vendor: https://moosocial.com/product/store-plugins/ Software Link: https://moosocial.com/product/store-plugins/ Demo URL: http://addons.moosocial.com/stores Purchase lin...

Chaturbate: Account Takeover via billing

The hacker found that when subscribing to a fanclub the parameters could be manipulated to purchase a fanclub subscription for another user. This will set the email of the target account if they had no email on file. This could then be used to reset the password for the target user. The purchasin...

Denial of service

The doPayouts function of the smart contract implementation for MegaCryptoPolis, an Ethereum game, has a Denial of Service vulnerability. If a smart contract that has a fallback function always causing exceptions buys a land, users cannot buy lands near that contract's land, because those purchas...

Fortnite APK Download for Android Won't Be Available on Google Play Store

There's both good news and bad news for Fortnite game lovers. Fortnite, one of the most popular games in the world right now, is coming to Android devices very soon, but players would not be able to download Fortnite APK from the Google Play Store. Instead, Epic Games software development company...

Threat Outbreak Alert RuleID33102: Email Messages Distributing Malicious Software on July 4, 2018

Medium Alert ID: 58357 First Published: 2018 July 5 15:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33102 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID33108: Email Messages Distributing Malicious Software on July 5, 2018

Medium Alert ID: 58369 First Published: 2018 July 5 15:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33108 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32822: Email Messages Distributing Malicious Software on June 21, 2018

Medium Alert ID: 58247 First Published: 2018 June 21 14:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32822 may contain the following files: Name | Siz...

Security Bulletin: IBM Maximo Asset Management could allow an authenticated user to view work logs during purchase orders that they should not have access to (CVE-2016-0222)

Summary IBM Maximo Asset Management could allow an authenticated user to view work logs during purchase orders that they should not have access to. Vulnerability Details CVEID: CVE-2016-0222 DESCRIPTION: IBM Maximo Asset Management could allow an authenticated user to view work logs during purcha...

Threat Outbreak Alert RuleID32941: Email Messages Distributing Malicious Software on June 11, 2018

Medium Alert ID: 58139 First Published: 2018 June 11 21:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32941 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID32762: Email Messages Distributing Malicious Software on May 11, 2018

Medium Alert ID: 57877 First Published: 2018 May 11 17:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32762 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32627: Email Messages Distributing Malicious Software on April 27, 2018

Medium Alert ID: 57623 First Published: 2018 May 1 11:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32627 may contain the following files: Name| Size i...

Threat Outbreak Alert RuleID32479: Email Messages Distributing Malicious Software on April 17, 2018

Medium Alert ID: 57513 First Published: 2018 April 17 14:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32479 may contain the following files: Name | Si...

Tech support scammers GeeksHelp caught again, two years later

Many researchers have noted an increase in tech support scam activity during the past few months. This trend, facilitated by browser lockers, is not surprising considering that other web-based infection methods are not as effective. While people are still receiving cold calls from alleged Microso...

Mail.ru: Race condition на market.games.mail.ru

It was possible to get few game items by replaying the single purchase operation for multiple times during the short amount of time. market.games.mail.ru is not in the bug bounty scope, the bounty was awarded out-of-scope due to real monetary impact...

Threat Outbreak Alert RuleID32003: Email Messages Distributing Malicious Software on February 14, 2018

Medium Alert ID: 56826 First Published: 2018 February 14 18:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32003 may contain the following files: Name |...

Instagram info disclosure (email + phone) 0day Exploit

Usage Info 1.make the files from exploit codes 2.host them on your web 3.you're all set! This is private exploit. You can buy it at https://0day.today...

Website Glitch Let Me Overstock My Coinbase

Coinbase and Overstock.com just fixed a serious glitch that allowed Overstock customers to buy any item at a tiny fraction of the listed price. Potentially more punishing, the flaw let anyone paying with bitcoin reap many times the authorized bitcoin refund amount on any canceled Overstock orders...

Web Reconnaissance Framework: Recon-ng

Recon-ng is a full-featured Web Reconnaissance framework written in Python. Complete with independent modules, database interaction, built in convenience functions, interactive help, and command completion, Recon-ng provides a powerful environment in which open source web-based reconnaissance can...