Techno Life, Micromax New Version Official Firmware, Winmax official firmware, Nokia Flash File, WhatsApp Messenger, Lenovo, huawei, xiaomi, samsung galaxy

Cari Blog Ini

Diberdayakan oleh Blogger.
Kamis, 27 Agustus 2015

Critical PayPal XSS vulnerability left accounts open to attack

Critical PayPal XSS vulnerability left accounts open to attack - these days more and more blogs that talk about technology, including blogs Techno Life but we are very experienced in this case because we have been there from a few years ago always present information about techno for you, well now we are about Critical PayPal XSS vulnerability left accounts open to attack hopefully the information we will convey can answer your question to google, please see:

Articles : Critical PayPal XSS vulnerability left accounts open to attack
full Link : Critical PayPal XSS vulnerability left accounts open to attack

You can also see our article on:


Critical PayPal XSS vulnerability left accounts open to attack

insecure_paypal
PayPal has patched a security vulnerability which could have been used by hackers to steal users' login details, as well as to access unencrypted credit card information. A cross site scripting bug was discovered by Egyptian 'vulnerabilities hunter' Ebrahim Hegazy -- ironically on PayPal's Secure Payments subdomain.
Hegazy found the Stored XSS Vulnerability on https://Securepayments.Paypal.com back in the middle of June, and was able to demonstrate how it could be exploited. More than two months later, PayPal has addressed the issue and plugged the security hole.
Describing himself as an 'ethical hacker', Hegazy reported his discovery to PayPal on 16 June. He found that it was possible to engineer an HTML page that intercepted data entered on a secure PayPal page and transmit it to another server as plain text. This information was then available for exploitation in whatever way the attacker saw fit. Worryingly, Hegazy says that it would be possible for all of this to happen invisibly in the background -- a victim could make a regular PayPal payment which would clear, but there could also be an extra payment made to the attacker.
The bug was reported through PayPal's bug bounty program, and Hegazy praised the company for responding to emails quickly. As well as ensuring that the security flaw was fixed, he also managed to bag himself PayPal's top bounty reward of $750 for his troubles.
If you're interested to see how the vulnerability worked, check out the video below where Hegazy explains it all:



information Critical PayPal XSS vulnerability left accounts open to attack has been discussed

hopefully the meaning of Critical PayPal XSS vulnerability left accounts open to attack that we write can be useful for you in adding insight about gadgets.

you just finished reading the article titled Critical PayPal XSS vulnerability left accounts open to attack if you want to bookmark or share your links use the link https://lifeandeating.blogspot.com/2015/08/critical-paypal-xss-vulnerability-left.html do not forget to go back to this blog if you want to get the latest information about gadgets.

Tag :
Share on Facebook
Share on Twitter
Share on Google+
Tags :

Related : Critical PayPal XSS vulnerability left accounts open to attack

0 komentar:

Posting Komentar