SQL Injection Vulnerability in the Website Building System of Inner Mongolia Hohai Trading Co.

Ltd. is mainly engaged in e-commerce, website construction, software development, computer promotion and application of information construction services. Inner Mongolia Hohai Trade Co., Ltd. website construction system there is a SQL injection vulnerability, attackers can use the vulnerability t...

Clickjacking Vulnerability in Golden Jade Butler App

Jade Butler app is a mobile trading platform launched by Hengtai Securities, the platform has securities quotes, securities trading, account management, securities information and many other features. There is a clickjacking vulnerability in Jade Butler App, which can be exploited by attackers to...

trading-gurus.com Cross Site Scripting vulnerability

Security Researcher g0bl1nsec Helped patch 3650 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting trading-gurus.com website and its users. Following...

Coronavirus Bitcoin scam promises “millions” working from home

In the last week, we’ve seen multiple coronavirus scams pushed by bad actors, including RAT attacks via fake health advisories, bogus e-books working in tandem with Trojans, and lots of other phishing shenanigans. Now we have another one to add to the ever-growing list: dubious coronavirus Bitcoi...

Oriental Wealth Independent Trading Terminal has dll Hijacking Vulnerability

Oriental Wealth Independent Trading Terminal is a software for securities trading under Oriental Wealth. There is a dll hijacking vulnerability that can be exploited by attackers to execute arbitrary code...

OpenTrade SQL Injection Vulnerability

OpenTrade is an open source cryptocurrency trading platform. A SQL injection vulnerability exists in versions of OpenTrade prior to 2019-11-23. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit the...

How Machine Learning is Changing the Face of Financial Services

Artificial intelligence AI has become integrated into our everyday lives. It powers what we see in our social media newsfeeds, activates facial recognition to unlock our smartphones, and even suggests music for us to listen to. Machine learning, a subset of AI, is progressively integrating into o...

This Week in Security News: Fake Apps on iOS and Google Play and Social Media Security Issues

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about the evolution of EDR to XDR and why your CISO should care, stock trading app attacks and fake gambling apps. Also, read about ho...

SQL Injection Vulnerability in the Website Building System of Inner Mongolia Hohai Trading Co.

Inner Mongolia Hohai Trade Co., Ltd. is a professional information technology network service provider that integrates creativity, planning, design and production, and technology development. There is a SQL injection vulnerability in the website system of Inner Mongolia Hohai Trading Co. Attacker...

New Facebook ad reporting tool launches in UK

Last year, well-known consumer advice expert Martin Lewis decided to take Facebook to court for defamation. The cause? Multiple bogus adverts placed on the social network featuring his likeness, appearing via the ad network Outbrain. As a trusted face in consumer causes, scammers bolting Lewis'...

A week in security (July 1 – 7)

Last week on Malwarebytes Labs, we explained what to do when you find stalkerware, how cooperating apps and automatic permissions are setting you up for failure, and why you should steer clear of Bitcoin Cash generators. Other cybersecurity news: A former Chief Information Officer CIO of Equifax...

MetaTrader 4 vs MetaTrader 5 iPhone app

By Owais Sultan If you are an online trading enthusiast, you can use MetaTrader 5 and MetaTrader 4 iPhone apps to trade forex. Though the prime objective of MetaTrader 4 iPhone app and MetaTrader 5 iPhone app is to enable users to have great trading experience, these forex trading apps vary in...

Security Basics for the Novice Online Traders

By David Balaban The popularity of online trading is growing and there is a need to always use the best security measures in order to protect your online wallets and investment portfolios. New types of fraud appear every day, so it is crucial to stay attentive in order to protect your hard-earned...

SQL Injection Vulnerability in Electronic Bidding and Trading Platforms

Jiangsu Guotai New Point Software Co., Ltd. is to provide e-government, public resources trading, electronic bidding, construction industry, smart city and other fields of related software products and hardware and software integration solutions. There is a SQL injection vulnerability in the...

Stored Cross-Site Scripting Vulnerability in Public Resources Trading Center of Jiangsu Guotai Newpoint Software Co.

Jiangsu Guotai New Point Software Co., Ltd. is to provide e-government, public resources trading, electronic bidding, construction industry, smart city and other fields of related software products and hardware and software integration solutions. A stored cross-site scripting vulnerability exists...

Tradebox CryptoCurrency - 'symbol' SQL Injection

Title: Tradebox - CryptoCurrency Buy Sell and Trading Date: 04.04.2019 Exploit Author: Abdullah Çelebi Vendor Homepage: https://www.bdtask.com Software Link: tradebox.bdtask.com/demo-v5.3/ Version: 5.4 Category: Webapps Tested on: WAMPP @Win Software description: Tradebox – CryptoCurrency Buy Sel...

Tradebox CryptoCurrency - symbol SQL Injection

Tradebox CryptoCurrency - symbol SQL Injection Title: Tradebox - CryptoCurrency Buy Sell and Trading Date: 04.04.2019 Exploit Author: Abdullah Çelebi Vendor Homepage: https://www.bdtask.com Software Link: tradebox.bdtask.com/demo-v5.3/ Version: 5.4 Category: Webapps Tested on: WAMPP @Win Software...

Tradebox CryptoCurrency 5.4 SQL Injection

Title: Tradebox - CryptoCurrency Buy Sell and Trading Date: 04.04.2019 Exploit Author: Abdullah Çelebi Vendor Homepage: https://www.bdtask.com Software Link: tradebox.bdtask.com/demo-v5.3/ Version: 5.4 Category: Webapps Tested on: WAMPP @Win Software description: Tradebox – CryptoCurrency Buy Sel...

SQL Injection Vulnerability in Frontend of Haitong Network Digital Currency Trading Platform

Haitong Network Digital Currency Trading Platform is a digital currency trading platform. A SQL injection vulnerability exists in the frontend of Haitong Network Digital Currency Trading Platform, which can be exploited by attackers to obtain sensitive information from the database...

U.S. Issues Multiple Charges For 2016 SEC Hack

Two Ukrainains have been indicted in hacking the U.S. Securities and Exchange Commission SEC in order to steal and sell non-public, confidential information from publicly-traded companies. The two have been charged as part of a large-scale conspiracy to hack the SEC’s computer systems and profit ...