743 matches found
CVE-2024-11101
A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/search-invoices.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack...
Scammers Use DocuSign API to Evade Spam Filters with Phishing Invoices
Scammers are exploiting DocuSign's APIs to send realistic fake invoices, primarily targeting security software like Norton. This phishing…...
Attackers Abuse DocuSign API to Send Authentic-Looking Invoices At Scale
In a concerning trend, cybercriminals are leveraging DocuSign's APIs to send fake invoices that appear strikingly authentic. Unlike traditional phishing scams that rely on deceptively crafted emails and malicious links, these incidents use genuine DocuSign accounts and templates to impersonate...
CVE-2024-50421
Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocommerce-pdf-invoices-packing-slips allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoices & Packing Slips: from n/a through = 3.8.6...
CVE-2024-50421 WordPress PDF Invoices & Packing Slips for WooCommerce plugin <= 3.8.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocommerce-pdf-invoices-packing-slips allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoices & Packing Slips: from n/a through = 3.8.6...
CVE-2024-50421 WordPress PDF Invoices & Packing Slips for WooCommerce plugin <= 3.8.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocommerce-pdf-invoices-packing-slips allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoices & Packing Slips: from n/a through = 3.8.6...
CVE-2024-50421
CVE-2024-50421 concerns the WordPress plugin WooCommerce PDF Invoices & Packing Slips (versions
WordPress plugin WooCommerce PDF Invoices & Packing Slips 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPre...
PT-2024-34195 · Wp Overnight · Woocommerce Pdf Invoices & Packing Slips
Name of the Vulnerable Software and Affected Versions: WooCommerce PDF Invoices & Packing Slips versions 3.8.6 and earlier Description: The issue is related to a Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips, which allows exploiting incorrectly...
WordPress PDF Invoices & Packing Slips for WooCommerce plugin <= 3.8.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin WooCommerce PDF Invoices & Packing Slips versions = 3.8.6...
WordPress WooCommerce PDF Invoices & Packing Slips Plugin <= 3.8.6 is vulnerable to Broken Access Control
Software WooCommerce PDF Invoices & Packing Slips Type Plugin Vulnerable versions = 3.8.6 Fixed in 3.8.7 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-50421 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID b5246d239102 Credits Rafi...
CVE-2024-9671
A vulnerability was found in 3Scale. There is no auth mechanism to see a PDF invoice of a Developer user if the URL is known. Anyone can see the invoice if the URL is known or guessed...
CVE-2024-9671 System: pdf invoices of the developer users can be seen if the url is known
A vulnerability was found in 3Scale. There is no auth mechanism to see a PDF invoice of a Developer user if the URL is known. Anyone can see the invoice if the URL is known or guessed...
CVE-2024-9671
The CVE-2024-9671 issue affects Red Hat 3scale and is due to an absence of authentication for PDF invoices: if the URL is known or guessable, any Developer’s invoice can be accessed without auth. Documents consistently describe the vulnerability as an information exposure via predictable URLs, wi...
Red Hat 3scale 安全漏洞
Red Hat 3scale is a suite of API Application Programming Interface lifecycle management software from Red Hat USA. A security vulnerability exists in Red Hat 3scale that stems from the fact that there is no authentication mechanism to view PDF invoices for developer users if the URL is known, and...
PT-2024-40087 · Unknown +1 · Phpspreadsheet +1
Name of the Vulnerable Software and Affected Versions: Kimai versions affected versions not specified PHPSpreadsheet versions affected versions not specified Description: The issue is related to an XXE vulnerability in PHPSpreadsheet, which is used by Kimai for importing and exporting invoices...
PT-2024-28862 · Sourcecodester · Best House Rental Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Best House Rental Management System version 1.0 Description: The issue is related to Incorrect Access Control. It affects several API endpoints, including "/rental/payment report.php", "/rental/balance report.php",...
CVE-2024-40475
CVE-2024-40475 affects SourceCodester Best House Rental Management System v1.0. The Red Hat and NVD/NVD-enriched records confirm an Incorrect Access Control vulnerability reachable at the REST/UI endpoints: “/rental/payment_report.php”, “/rental/balance_report.php”, “/rental/invoices.php”, “/rent...
CVE-2024-40475
SourceCodester Best House Rental Management System v1.0 is vulnerable to Incorrect Access Control via /rental/paymentreport.php, /rental/balancereport.php, /rental/invoices.php, /rental/tenants.php, and /rental/users.php...