Lucene search
+L

2239 matches found

NVD
NVD
•added 2025/03/03 2:15 p.m.•23 views

CVE-2025-26535

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CodeSolz Bitcoin / AltCoin Payment Gateway for WooCommerce woo-altcoin-payment-gateway allows Blind SQL Injection.This issue affects Bitcoin / AltCoin Payment Gateway for WooCommerce: from n/a...

9.3CVSS0.00503EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/03 1:30 p.m.•72 views

CVE-2025-26535

CVE-2025-26535 is a SQL Injection vulnerability in WordPress plugin Bitcoin / AltCoin Payment Gateway for WooCommerce (and Multivendor store). Affected versions are up to 1.7.6. The issue permits Blind SQL Injection (per CVE description) with a CVSS v3.1 base score of 9.3 (CRITICAL, NETW/LOW). Co...

9.3CVSS7.3AI score0.00503EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/03 1:30 p.m.•12 views

CVE-2025-26535 WordPress Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop plugin <= 1.7.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in NotFound Bitcoin / AltCoin Payment Gateway for WooCommerce allows Blind SQL Injection. This issue affects Bitcoin / AltCoin Payment Gateway for WooCommerce: from n/a through 1.7.6...

9.3CVSS9.8AI score0.00503EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/03 12:00 a.m.•14 views

WordPress plugin Bitcoin / AltCoin Payment Gateway for WooCommerce SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Bitcoin / AltCoin Payment...

9.3CVSS8.9AI score0.00503EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/03/03 12:00 a.m.•4 views

PT-2025-9464

Name of the Vulnerable Software and Affected Versions Bitcoin / AltCoin Payment Gateway for WooCommerce versions 1.7.6 and earlier Description The issue is related to an SQL Injection vulnerability, specifically a Blind SQL Injection, due to the improper neutralization of special elements used in...

9.3CVSS0.00503EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•6 views

CVE-2025-26535: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CodeSolz Bitcoin / AltCoin Payment Gateway for WooCommerce woo-altcoin-payment-gateway allows Blind SQL Injection.This issue affects Bitcoin / AltCoin Payment Gateway for WooCommerce: from n/a...

9.3CVSS5.8AI score0.00503EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/02 12:00 a.m.•12 views

CVE-2025-27579

In Bitaxe ESP-Miner before 2.5.0 with AxeOS, one can use an /api/system CSRF attack to update the payout address aka stratumUser for a Bitaxe Bitcoin miner, or change the frequency and voltage settings...

5.4CVSS5.5AI score0.00209EPSS
SaveExploits0References3
OSV
OSV
•added 2025/03/02 12:00 a.m.•16 views

CVE-2025-27579

In Bitaxe ESP-Miner before 2.5.0 with AxeOS, one can use an /api/system CSRF attack to update the payout address aka stratumUser for a Bitaxe Bitcoin miner, or change the frequency and voltage settings...

5.4CVSS6.5AI score
SaveExploits0References5
Patchstack
Patchstack
•added 2025/03/01 8:33 p.m.•14 views

WordPress Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop plugin <= 1.7.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Bitcoin / AltCoin Payment Gateway for WooCommerce versions = 1.7.6...

9.3CVSS8.1AI score0.00503EPSS
SaveExploits0Affected Software1
The Hacker News
The Hacker News
•added 2025/02/26 1:54 p.m.•69 views

Leaked Black Basta Ransomware Chat Logs Reveal Inner Workings and Internal Conflicts

More than a year's worth of internal chat logs from a ransomware gang known as Black Basta have been published online in a leak that provides unprecedented visibility into their tactics and internal conflicts among its members. The Russian-language chats on the Matrix messaging platform between...

10CVSS7.2AI score0.99999EPSS
SaveExploits790
The Hacker News
The Hacker News
•added 2025/02/25 10:13 a.m.•23 views

GitVenom Malware Steals $456K in Bitcoin Using Fake GitHub Projects to Hijack Wallets

Cybersecurity researchers are calling attention to an ongoing campaign that's targeting gamers and cryptocurrency investors under the guise of open-source projects hosted on GitHub. The campaign, which spans hundreds of repositories, has been dubbed GitVenom by Kaspersky. "The infected projects...

7.4AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/02/07 9:49 a.m.•15 views

CVE-2025-24544

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dashed-slug.net Bitcoin and Altcoin Wallets wallets allows Reflected XSS.This issue affects Bitcoin and Altcoin Wallets: from n/a through = 6.3.1...

7.1CVSS5.9AI score0.00327EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 8:55 a.m.•11 views

CVE-2024-38365

btcd is an alternative full node bitcoin implementation written in Go golang. The btcd Bitcoin client versions 0.10 to 0.24 did not correctly re-implement Bitcoin Core's "FindAndDelete" functionality. This logic is consensus-critical: the difference in behavior with the other Bitcoin clients can...

7.4CVSS6.6AI score0.01007EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2025/02/03 5:56 p.m.•7 views

bitcoin-harness (0.1.0), bitcoin_rpc_client (>=0.5.0, <=0.6.1) +82 more potentially affected by CVE-2025-24898 via openssl (>=0.10.7, <=0.10.68)

openssl CARGO version =0.10.7, =0.5.0, =0.2.0, =0.0.0, =0.0.1, =0.3.3, =0.6.25, =0.1.0-alpha.0, =0.0.3, =0.1.24, =0.37.0-pre, =0.4.0, =0.37.0-pre, =0.37.0-pre, =0.38.0 and more Source cves: CVE-2025-24898 Source advisory: OSV:GHSA-RPMJ-RPGJ-QMPM...

6.3CVSS5.6AI score0.0068EPSS
SaveExploits0
NVD
NVD
•added 2025/02/03 3:15 p.m.•11 views

CVE-2025-24544

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dashed-slug.net Bitcoin and Altcoin Wallets wallets allows Reflected XSS.This issue affects Bitcoin and Altcoin Wallets: from n/a through = 6.3.1...

7.1CVSS0.00327EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/03 2:22 p.m.•32 views

CVE-2025-24544 WordPress Bitcoin and Altcoin Wallets plugin <= 6.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dashed-slug.net Bitcoin and Altcoin Wallets wallets allows Reflected XSS.This issue affects Bitcoin and Altcoin Wallets: from n/a through = 6.3.1...

7.1CVSS0.00327EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/03 2:22 p.m.•65 views

CVE-2025-24544

CVE-2025-24544 affects WordPress plugin Bitcoin and Altcoin Wallets (versions prior to 6.3.1). The root cause is improper input neutralization during web page generation, enabling a Reflected XSS vulnerability. Practical impact (as described) is that an attacker could inject malicious scripts via...

7.1CVSS5.9AI score0.00327EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/03 12:00 a.m.•12 views

PT-2025-5394 · Unknown · Alexandros Georgiou Bitcoin/Altcoin Wallets

Name of the Vulnerable Software and Affected Versions: Alexandros Georgiou Bitcoin and Altcoin Wallets versions prior to 6.3.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for Cross-site Scripting XSS attacks, specifically Reflecte...

7.1CVSS5.9AI score0.00327EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/03 12:00 a.m.•2 views

CVE-2025-24544: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dashed-slug.net Bitcoin and Altcoin Wallets wallets allows Reflected XSS.This issue affects Bitcoin and Altcoin Wallets: from n/a through = 6.3.1...

7.1CVSS5.8AI score0.00327EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/03 12:00 a.m.•10 views

WordPress plugin Bitcoin and Altcoin Wallets 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS6.1AI score0.00327EPSS
SaveExploits0References1
Rows per page
Query Builder