An ethical hacker has warned Kindle users against downloading ebooks from third-party sites after discovering flaws that could expose credit card information.