We discovered multiple security vulnerabilities with https://t.co/DxfpPdlRmf.
Users’ personal email addresses, phone numbers, home addresses, and credit/debit card information are exposed to everyone on the internet.
Sales configured to hide the street address still return the full address from a public data endpoint.
After sign-in, an attacker can instruct the website to redirect the user to any website.
These vulnerabilities make it easier for scammers to perform phishing attacks on the platform's users.
We disclosed these vulnerabilities to https://t.co/DxfpPdlRmf but never heard back.
https://t.co/HGbANY21vs is a privacy-first estate sale listing platform. We are disclosing these issues in the interest of https://t.co/DxfpPdlRmf's customers.
If you are interested in migrating platforms, email [email protected] and we will help.
Read more here:
https://t.co/khK5U7kQaj
https://t.co/ojw14KDQDY's new sign-up page
We are building the best estate sale listing platform in the world...even the smallest of user experience details matter.
https://t.co/ojw14KEotw is the most advanced platform for estate sales and estate sale companies.
The first two months are free. After that it is $29.95 a month.
Sign up here:
https://t.co/wWpWR8JzYG
https://t.co/Q55SyHOOTc v2.5 is live! When publishing a sale, companies can keep the exact street address private and choose a reveal date, giving sellers a safer way to promote upcoming sales.
Sign up here: https://t.co/wWpWR8J298
Introducing https://t.co/Q55SyHOOTc: A Modern Platform for Estate Sales, Auctions, and More in Sugar Land, TX and surrounding areas.
https://t.co/yj3vTFq4Y1