General

Profile

Redmine Admin

  • Login: admin
  • Registered on: 03/04/2024
  • Last sign in: 12/22/2024

Issues

open closed Total
Assigned issues 0 0 0
Reported issues 8 0 8

Projects

Project Roles Registered on
subproject admin 12/22/2024

Activity

12/22/2024

02:11 PM test-test SoftPos #9 (New): cxvxcv
xcvb xcv Redmine Admin

12/18/2024

02:26 PM Finpay SoftPos #8: Email enumeration using forget password
LIQUID Redmine Admin
02:19 PM Finpay SoftPos #8 (New): Email enumeration using forget password
Description
The forget password feature is vulnerable to email enumeration, allowing an unauthenticated user to
ge...
Redmine Admin
02:18 PM Finpay SoftPos #7 (New): Terminal registration OTP can be bypassed
Description
To securely register a terminal the admin login with their credentials and then they are asked to
prov...
Redmine Admin
02:17 PM Finpay SoftPos #6 (New): Refund transaction as user
Description
Normal merchant users cannot issue a refund and require the intervention of a supervisor user to
enter...
Redmine Admin
02:16 PM Finpay SoftPos #5 (New): Unauthenticated API
Description
The application has several API endpoints that responds to HTTP requests without any
authentication. T...
Redmine Admin
02:10 PM Finpay SoftPos #4 (New): METHODOLOGY
During planning we
01.1 Gather information about the application
and business rules
01.2 Research the technology...
Redmine Admin
02:06 PM Finpay SoftPos #2 (New): Summary of Findings
In a glance view, the below shows the number of discovered risks based on priorities Redmine Admin
02:05 PM Finpay SoftPos #1 (New): Vulnerability Analysis
Description
The forget password feature is vulnerable to email enumeration, allowing an unauthenticated user to
ge...
Redmine Admin

Also available in: Atom