903 matches found
CVE-2012-5178
Cross-site request forgery CSRF vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that complete a purchase...
Information disclosure
The Ubercart SecureTrading Payment Method module 6.x for Drupal does not properly verify payment notification information, which allows remote attackers to purchase an item without paying via unspecified vectors...
CVE-2012-4482
The Ubercart SecureTrading Payment Method module 6.x for Drupal does not properly verify payment notification information, which allows remote attackers to purchase an item without paying via unspecified vectors...
Windows website loophole allow anyone to get WIndows 8 in just $14.99
Windows 8 launched in 37 languages and 140 worldwide markets, as the tech giant unveiled the new version of its computer operating system. The OS is now available in over 30 certified devices, and a broad selection of local apps are already available in the onboard Windows Store. It is also...
WordPress Welcart Plugin <= 1.2.1 - CSRF
Because of this vulnerability, the attackers can hijack the authentication of arbitrary users for requests that complete a purchase. Solution Update the plugin...
CVE-2012-3741
The Restrictions aka Parental Controls implementation in Apple iOS before 6 does not properly handle purchase attempts after a Disable Restrictions action, which allows local users to bypass an intended Apple ID authentication step via an app that performs purchase transactions...
Design/Logic Flaw
The Restrictions aka Parental Controls implementation in Apple iOS before 6 does not properly handle purchase attempts after a Disable Restrictions action, which allows local users to bypass an intended Apple ID authentication step via an app that performs purchase transactions...
CVE-2012-3741
The Restrictions aka Parental Controls implementation in Apple iOS before 6 does not properly handle purchase attempts after a Disable Restrictions action, which allows local users to bypass an intended Apple ID authentication step via an app that performs purchase transactions...
App Store bypassed by Russian hacker without jailbreaking
Apple is investigating yet another security breach in its iTunes app store . A Russian hacker worked out a way that allows people to bypass payment in the App Store and download products for free. The hacker, dubbed ZonD80, posted a video of the crack on YouTube Deleted by Youtube now and claims...
DiscuzX1. 5+ prop of the brush sub-vulnerability-vulnerability warning-the black bar safety net
If the user group set up"to purchase items a discount"option to buy when the price is discounted price, and sell when the price is not discounted price. That is the time to buy discount, sell when it is the original price. Buy: $magic'discountprice' = $G'group''magicsdiscount' ? intval$magic'pric...
CMS Made Simple 1.4.1 LFI
Local file include vulnerability in CMS Made Simple cmslanguage cookie parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...
Most soil group purchase 2. 0_20110901 the background to BYPASS the login background 0day analysis-vulnerability warning-the black bar safety net
Two days before in the black bar to see the most soil group purchase network to BYPASS the login background 0day original of address: the vulnerability information for this vulnerability last year are already out, but the black bar article update comparing fall behind!, the Feel exploit tactics a...
Most soil group purchase network to BYPASS the login background 0day-vulnerability warning-the black bar safety net
1: The 后台 地址 manage/login.php 2. Right-view the source code. Find the following code: divlabelfor="manage-login"login/labelinputtype="text"size="3 0"name="username"id="manage-username"datatype="require"require="true"//div 3. Which will be name="username" was changed to: name="username=0x7c or...
Facebook content restrictions bypass Vulnerability
Facebook content restrictions bypass Vulnerability Blackhat Academy claims to have found a way to bypass content restrictions on links, as posted on their site and posts put on a user's public wall. Even Security Analysts claim that Facebook was notified of these vulnerabilities on July 31st, 201...
Get Your New Video Codecs–and Scareware
Scareware gangs have been using pretty much the same tactics since the dawn of time. Or at least since 2005. They compromise Web sites, use them as jumping off points for pop-up boxes that aim to terrify the citizenry into thinking their PCs are infected and downloading fake security software. Bu...
Unfixed XSS vulnerability at www.elcomsoft.com
Security researcher d3v1l, has submitted on 05/02/2011 a cross-site-scripting XSS vulnerability affecting www.elcomsoft.com, which at the time of submission ranked 68441 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currentl...
China Hackers hacked into secret South Korean military files !
CHINESE computer hackers last June gained access to secret South Korean military files on a planned spy plane purchase from the United States, a Seoul lawmaker says. The hackers accessed information in defence ministry computers on the plan to buy unmanned Global Hawk aircraft, said Shin Hak Yong...
Front Accounting 2.3RC2 - Multiple SQL Injections
Advisory Name: Multiple SQL Injections in Front Accounting Internal Cybsec Advisory Id: 2010-1003-Multiple SQL Injections in Front Accounting Vulnerability Class: SQL Injection Affected Applications: Front Accounting v2.3RC2; other versions may also be affected. Affected Platforms: Any running...
Most soil buy the system blind and cookie spoofing vulnerability-vulnerability warning-the black bar safety net
Most soil group purchase system is a domestic famous group purchase program in the domestic group purchase system of share in the proportion is very large. But because some version of some where filtering does not completely lead to injection vulnerabilitiesnon-killed. Find a way powered by zuitu...
Bs Events_Locator Script SQL Injection
1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs EventsLocator Script Sqli Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL :http://www.brotherscripts.com/ Price:$24.95 Author : Sid3^effects...