Paypal - cash --> one click)

[Nosferatu]

https://medium.com/@h4x0r_dz/vulnerability-in-paypal-worth-200000-bounty-attacker-can-steal-your-balance-by-one-click-2b358c1607cchttps://medium.com/@h4x0r_dz/vulnerability-in-paypal-worth-200000-bounty-attacker-can-steal-your-balance-by-one-click-2b358c1607cc
кто-нибудь пробовал?

 

[marauda18]

https://medium.com/@h4x0r_dz/vulnerability-in-paypal-worth-200000-bounty-attacker-can-steal-your-balance-by-one-click-2b358c1607cchttps://medium.com/@h4x0r_dz/vulnerability-in-paypal-worth-200000-bounty-attacker-can-steal-your-balance-by-one-click-2b358c1607cc
anyone tried it?

Yeah,I created a exploit for this,good stuff.

 

[marauda18]

I need help testing,anyone with paypal,send me a PM.

 

[implication]

Does it still work? I’m assuming they must’ve fixed it.

 

[marauda18]

Does it still work? I’m assuming they must’ve fixed it.

This vuln was discovered in 2021 and Paypal is aware of the risky,maybe they will fix now because of the attention that is receiving.

They say It's not a real vulnerability, but a fraud where you manipulate the victim to transfer money using clickjacking. For me, It's a exploit if anyone can change the token.