supersmart.com Cross Site Scripting vulnerability OBB-3524011

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Supersmart 安全漏洞

Supersmart is an artificially intelligent automated checkout for brick-and-mortar retail from Israel's Supersmart. Supersmart Walk suffers from a security vulnerability that stems from the presence of unauthorized actions performed on other customers, which can be exploited by an attacker to rese...

CVE-2022-30628: Undefined Security Weakness

It was possible to download all receipts without authentication. Must first access the API https://XXXX.supersmart.me/services/v4/customer/signin to get a TOKEN. Then you can then access the API that provides invoice images based on the URL...

PT-2022-20218

Name of the Vulnerable Software and Affected Versions Supersmart affected versions not specified Description The issue allows downloading all receipts without authentication. To exploit this, an attacker must first access the API endpoint "https://XXXX.supersmart.me/services/v4/customer/signin" t...

Supersmart 安全漏洞

Supersmart is an artificially intelligent automated checkout for brick-and-mortar retail by Israel's Supersmart. Supersmart has a security vulnerability that stems from accessing business information without authentication...