$6 million heist targets video game skin trading site

An incredibly popular digital item trading site has suffered a spectacular loss at the hands of wily attackers. According to Bleeping Computer, CS Money lost out on $6 million via just 20,000 pilfered items. How did this happen, and why are digital items so popular in the first place? The digitiz...

Why Cybersecurity Needs to be a Part of Your ESG

What is an ESG? Environmental, social, and corporate governance ESG documentation is a way to visualize and evaluate how an organization is working for the betterment of social goals and how that organization is responding to the cry for greener, more aware, and more responsible, sustainable...

EXNESS: IDOR in Stats API Endpoint Allows Viewing Equity or Net Profit of Any MT Account

Hi Team, Today I logged into my Exness PA and noticed an updated performance page. I thought to give it a quick check and noticed that the API endpoints responsible for fetching the stats performance chart /stats/ is vulnerable to IDOR via accounts= parameter. The issue allows fetching the stats ...

mellontrading.com Cross Site Scripting vulnerability OBB-2745278

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

onlinetradingcampus.com Cross Site Scripting vulnerability OBB-2672341

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2022-3724 Malicious code in huobi-trading-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74d29ecae36ab585836b991b6bbef49b053752417c2479bc2f7b6d086b2217b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in huobi-trading-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74d29ecae36ab585836b991b6bbef49b053752417c2479bc2f7b6d086b2217b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in huobi-trading-view-swap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4131800be5001915a56dd3db46bfe0a0b883eaa15801e0160afa68fc41fe30f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3725 Malicious code in huobi-trading-view-swap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4131800be5001915a56dd3db46bfe0a0b883eaa15801e0160afa68fc41fe30f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Scoop: Australian Trading Giant ACY Securities Exposed 60GB of User Data

By Waqas Upon being alerted by security researcher Anurag Sen, the company rubbished the sensitivity of the matter by labeling… This is a post from HackRead.com Read the original post: Scoop: Australian Trading Giant ACY Securities Exposed 60GB of User Data...

Automotive Shop Management System Cross-Site Scripting Vulnerability (CNVD-2022-77486)

Automotive Shop Management System is a system with customer management, vehicle sales, parts sales, repair and maintenance, agency services, auto credit, auto leasing, used car trading, and performance management functions. xss vulnerability exists in Automotive Shop Management System v1.0. An...

Avoiding Risks by Using Secure Online Crypto Platform

By Owais Sultan Cryptocurrency theft has become a common issue in the online trading space, thus making most investors take a… This is a post from HackRead.com Read the original post: Avoiding Risks by Using Secure Online Crypto Platform...

CVE-2022-22778

The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to execute Cross-Site Request Forgery CSRF on the affected system. A successful attack usin...

CVE-2022-22776

The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable vulnerabilities that allows a low privileged attacker with network access to execute Stored Cross Site Scripting XSS on the affected system. A successful attack using...

CVE-2022-22777

The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable Reflected Cross Site Scripting XSS vulnerabilities that allow an unauthenticated attacker with network access to execute scripts targeting the affected system or the...

Cross site scripting

The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable vulnerabilities that allows a low privileged attacker with network access to execute Stored Cross Site Scripting XSS on the affected system. A successful attack using...

Cross site scripting

The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains easily exploitable Reflected Cross Site Scripting XSS vulnerabilities that allow an unauthenticated attacker with network access to execute scripts targeting the affected system or the...

CVE-2022-22778 TIBCO BusinessConnect Trading Community Management Cross-Site Request Forgery Vulnerability

The Web Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Trading Community Management contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to execute Cross-Site Request Forgery CSRF on the affected system. A successful attack usin...

CVE-2022-22777

The CVE-2022-22777 entry concerns TIBCO BusinessConnect Trading Community Management. Affected product: TIBCO BusinessConnect Trading Community Management Web Server component (versions 6.1.0 and below). Root cause: easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that can ...

CVE-2022-22776

The CVE-2022-22776 affects TIBCO BusinessConnect Trading Community Management, Web Server component (versions 6.1.0 and below). The vulnerability is a Stored Cross Site Scripting (XSS) flaw that can be exploited by a low-privileged, network-accessing attacker; successful exploitation may require ...