Razer: Blind SQL Injection at http://easytopup.in.th/es-services/mps.php via serial_no parameter

The tester determined a Razer Gold Thailand server was vulnerable to a boolean-based blind SQL injection attack. Razer thanks the tester for the very clear PoC...

Razer: IDOR in eform.molpay.com leads to see other users application forms with private data

The tester discovered an IDOR which could allow an adversary to view the application form data of another user's application form given knowledge of the application ID. He worked with Triage to provide a working PoC. Razer Fintech appreciates the report to help keep customer data secure...

Razer: Reflected XSS in eform.molpay.com

The tester discovered a reflected XSS on eform.molpay.com. This was fixed in production on Feb 12. Razer Fintech thanks the tester for his diligence and clear PoC...

Razer: Blind SQL Injection(Time Based Payload) in https://www.easytopup.in.th/store/game/digimon-master via CheckuserForm[user_id]

The tester determined the Top Up site for Razer Gold TH suffered from a blind SQL injection vulnerability due to lack of input sanitization. Razer thanks the tester for his clear PoC and working with us to resolve the issue...

Razer: AWS subdomain Takeover at estore.razersynapse.com

The tester discovered the razersynapse.com domain was vulnerable to a subdomain takeover. Although this is out of scope of our program, we appreciate the tester bringing this to our attention...

Razer: DOM-based XSS on https://zest.co.th/zestlinepay/

The tester discovered a DOM based XSS on a Razer Gold Thailand associated website that could allow stealing of user session cookies. He provided excellent reproduction steps and a video PoC. Razer thanks the tester for his great report and helping us to keep our customers' information secure...

Razer: https://zest.co.th/zestlinepay/checkproduct API endpoint suffers from Boolean-based SQL injection

The tester discovered an unused service that suffered from a SQL injection vulnerability. This service was removed. Razer thanks the tester for his detailed work and report...

Razer: Leftover back-end system on www.zest.co.th allows an unauthorized attacker to generate Razer Gold Pin for free

The tester discovered a residual backend system was left exposed. The system was removed from public access. Razer thanks the tester for his diligence...

Razer: SQL Injection at https://sea-web.gold.razer.com/lab/cash-card-incomplete-translog-resend via period-hour Parameter

The tester discovered a SQL injection issue that allowed access to data via Razer Gold Thailand's sea-web server. Razer appreciates the clear and thorough report...

Razer: SQL injection at https://sea-web.gold.razer.com/demo-th/goto-e2p-web-api.php via Multiple Parameters

The tester discovered a SQL injection vulnerability that allowed the potential extraction of information from a Razer Gold database. Although this turned out to be an unused service, we thank the tester for his diligence...

Razer: SQLi at https://sea-web.gold.razer.com/demo-th/purchase-result.php via orderid Parameter

The tester discovered a SQLi vulnerability on a Razer Gold Thailand server. Razer appreciates the report and the clear PoC...

Razer: [SSRF] Server-Side Request Forgery at https://sea-web.gold.razer.com/dev/simulator via notify_url Parameter

The tester discovered an SSRF that could have allowed the compromise of the web.gold.razer.com server, leading to a significant data breach. Razer thanks the tester for the excellent report...

Razer: [press.razer.com] Origin IP found, Cloudflare bypassed

The tester discovered that the press.razer.com site exposed its IP which could allow bypassing of anti-DDoS mechanisms. While minor, Razer does appreciate the report and the tester bringing this to our attention...

Razer: Reflected XSS on https://www.easytopup.in.th/store/product/return on parameter mref_id

The tester discovered a reflected XSS on Razer Gold Thailand's easytopup.in.th page. We appreciate the excellent POC and code analysis...

Razer: Improper access control on easytopup.in.th transaction page leads to user's information disclosure and may lead to account hijacking

The tester discovered a Razer Gold Thailand server was vulnerable to information disclosure due to the use of a predicable reference ID in application URLs which could lead to the ability obtain phone numbers. Razer thanks the tester for his clear report...

Razer: Access to support tickets and payment history, impersonate razer support staff

The tester discovered the mysupport.razer.com site was vulnerable to a authentication bypass that allowed access to support tickets. Razer thanks the tester for the detailed PoC and diligence in helping us secure our customer's information...

Razer: Aws bucket writable mobile.razer.com

The tester discovered an S3 bucked owned by Mobile that was writeable. No files were present but the permissions were incorrect and subsequently fixed. Razer appreciates the report...

Razer: Reflected XSS at http://promotion.molthailand.com/index.php via promotion_id parameter

The tester discovered a reflected XSS vulnerability on https://easytopup.in.th related to a URL parameter. This issue affected the Firefox browser. Razer thanks the tester for the report and the clear proof of concept...

Razer: User Access Control Bypass Via Razer elevated service ( RzKLService.exe ) which loads exe in misconfigured way.

The tester discovered a Cortex related service suffered from a code path vulnerability that could lead to escalation of privilege. Razer thanks the tester for his report and helping keep our users secure...

Razer: Reflected XSS at https://sea-web.gold.razer.com/cash-card/verify via channel parameter

The tester discovered that the sea-web.gold.razer.com server suffered from a reflected XSS vulnerability. Razer thanks the tester for his report...