IG Trading - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application IG Trading published at the 'play' market has multiple vulnerabilities...

BDSwiss - The Trading App. - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application BDSwiss - The Trading App. published at the 'play' market has multiple vulnerabilities...

Trading 212 Forex & Stocks - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Trading 212 Forex & Stocks published at the 'play' market has multiple vulnerabilities...

Big-Name Law Firms Fall Victim To Hackers

Wall Street-savvy hackers are behind a data breach that involves a who’s-who of New York City legal firms. Federal investigators are looking into the breach that included Cravath Swaine & Moore LLP and Weil Gotshal & Manges LLP, both high-profile New York-based law firms. Cravath Swaine & Moore...

TradeOne - Online Trading - MIT license, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application TradeOne - Online Trading published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID21482: Email Messages Distributing Malicious Software on March 8, 2016

Medium Alert ID: 43919 First Published: 2016 March 8 15:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21482 may contain the following files: Name | Siz...

norway-trading.no XSS vulnerability

Open Bug Bounty ID: OBB-111426 Description| Value ---|--- Affected Website:| norway-trading.no Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Deriv.com: Cookie bug

blinkms reported a bug which allowed some of the blocked trading features to be enabled by manipulating the cookies...

trading-actu.com XSS vulnerability

Vulnerable URL: http://www.trading-actu.com//search/site/?q= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 20:59 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VI...

CVE-2015-5022

IBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 and 1.0.0.3 before 1.0.0.32, when access by guests is enabled, place an internal hostname and a payload path in a response, which allows remote authenticated users to obtain sensitive information ...

Design/Logic Flaw

IBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 and 1.0.0.3 before 1.0.0.32, when access by guests is enabled, place an internal hostname and a payload path in a response, which allows remote authenticated users to obtain sensitive information ...

CVE-2015-5022

IBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 and 1.0.0.3 before 1.0.0.32, when access by guests is enabled, place an internal hostname and a payload path in a response, which allows remote authenticated users to obtain sensitive information ...

'Bitcoin is Now Officially a Commodity' — US Regulator Declared

Bitcoins are making their way, in Bits and Pieces. In a recent report The Hacker News THN had mentioned about banks adopting the Blockchain Technology from Bitcoins; to create a safe and secure distributed ledger. Now, last week U.S. Commodity Future Trading Commission CFTC, has added Bitcoins an...

Threat Outbreak Alert RuleID17564: Email Messages Distributing Malicious Software on August 25, 2015

Medium Alert ID: 40661 First Published: 2015 August 25 19:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17564 may contain the following files: Name |...

Hack That Fueled Insider Trading Ring Netted $100M

Hackers based in Ukraine and Russia allegedly broke into servers belonging to several newswires and passed sensitive information onto an underground trading ring as part of what’s being referred to as an unprecedented new level of insider trading. Prosecutors claimed Tuesday that corporate...

SQL Injection Vulnerability in Type Parameters of Land Resources Online Trading System of Kunming Yunjindi Technology Co.

The online trading system for land resources is a government sunshine project, supported by the Central Commission for Discipline Inspection CCDI, embraced by the people, and concerned by the society. A SQL injection vulnerability exists in the type parameter of the land resources online...

Threat Outbreak Alert RuleID16358: Email Messages Distributing Malicious Software on July 1, 2015

Medium Alert ID: 39609 First Published: 2015 July 1 13:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16358 may contain the following files: Name | Size...

TORNADO Computer Trading CMS - SQL Injection Vulnerability

Document Title: =============== TORNADO Computer Trading CMS - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1489 Release Date: ============= 2015-05-05 Vulnerability Laboratory ID VL-ID: ====================================...

jbs-trading.de XSS vulnerability

Open Bug Bounty ID: OBB-56996 Description| Value ---|--- Affected Website:| jbs-trading.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2014-4901

The Bond Trading aka com.appmakr.app613309 application 197705 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...