1037 matches found
CVE-2021-41654
SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php...
MAL-2022-7390 Malicious code in zilliqa-social-pay (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a8400371d72c083526f030252ea8c15a37ae9aff8ef8b0ce4ad2bed20f27a26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in zilliqa-social-pay (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a8400371d72c083526f030252ea8c15a37ae9aff8ef8b0ce4ad2bed20f27a26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Experts Warn of Rise in ChromeLoader Malware Hijacking Users' Browsers
A malvertising threat is witnessing a new surge in activity since its emergence earlier this year. Dubbed ChromeLoader, the malware is a "pervasive and persistent browser hijacker that modifies its victims' browser settings and redirects user traffic to advertisement websites," Aedan Russell of R...
CVE-2021-26631
Improper input validation vulnerability in Mangboard commerce package could lead to occur for abnormal request. A remote attacker can exploit this vulnerability to manipulate the total order amount into a negative number and then pay for the order...
Merchandise Online Store SQL Injection Vulnerability (CNVD-2022-40279)
Merchandise Online Store is a merchandise online store system. A security vulnerability exists in Merchandise Online Store, which can be exploited by attackers to conduct SQL injection attacks via /vloggersmerch/classes/Master.php?f=payorder...
WeChat Pay Java SDK allows XXE
WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL...
GHSA-GQGV-2GP3-QQP3 WeChat Pay Java SDK allows XXE
WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL...
Merchandise Online Store SQL注入漏洞
Merchandise Online Store is a merchandise online store system. A security vulnerability exists in Merchandise Online Store, which can be exploited by attackers to conduct SQL injection attacks via /vloggersmerch/classes/Master.php?f=payorder...
NetDooka Framework Distributed via PrivateLoader Malware as Part of Pay-Per-Install Service
This report focuses on the components and infection chain of the NetDooka framework. Its scope ranges from the release of the first payload up until the release of the final RAT that is protected by a kernel driver...
Pay Slip PDF Generator System 1.0 SQL Injection Vulnerability
Pay Slip PDF Generator System version suffers from multiple remote SQL injection vulnerabilities that can lead to remote code execution. Title: Pay Slip PDF Generator System 1.0 Blind time SQLi To Rce Author: Hejap Zairy Vendor:...
Pay Slip PDF Generator System 1.0 Shell Upload Vulnerability
Title: Pay Slip PDF Generator System 1.0 Shell Upload Author: Hejap Zairy Vendor: https://www.sourcecodester.com/php/15242/employees-pay-slip-pdf-generator-system-email-using-phpoop-free-source-code.html Software: https://www.sourcecodester.com/sites/default/files/download/oretnom23/pess0.zip...
The pay() function can still be DOSed
Lines of code Vulnerability details Impact From the prior contest: in the pay function users repay their debt and in line 364: it decreases their debt. lets say a user wants to repay all his debt, he calls the pay function with his full debt. an attacker can see it and frontrun to repay a single...
[WP-H1] Wrong timing of check allows users to withdraw collateral without paying for the debt
Lines of code Vulnerability details function payPayParam calldata param external override lock returns uint128 assetIn, uint128 collateralOut requireblock.timestamp = param.ids.length, 'E205'; for uint256 i; i = uint256collateralOut due.debt, 'E303'; due.debt -= param.assetsIni; due.collateral -=...
WordPress Pay With Stripe – Your WordPress Payments Stripe Gateway plugin <= 1.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Pay With Stripe – Your WordPress Payments Stripe Gateway plugin versions = 1.2. Solution Update the Pay With Stripe – Your WordPress Payments Stripe Gateway plugin to the latest available version at...
WordPress Pay For Post with WooCommerce plugin < 3.0.9 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Pay For Post with WooCommerce plugin versions 3.0.9. Solution Update the WordPress Pay For Post with WooCommerce plugin to the latest available version at least 3.0.9...
Malware families using Pay-Per-Install service to expand targets
By Owais Sultan The PrivateLoader is a Pay-Per-Install malware PPI that delivers a wide variety of malware. Including Vidar, Raccoon, Redline,… This is a post from HackRead.com Read the original post: Malware families using Pay-Per-Install service to expand targets...
Samsung Screwed Up Encryption on 100M Phones
Samsung shipped an estimated 100 million smartphones with botched encryption, including models ranging from the 2017 Galaxy S8 on up to last year’s Galaxy S21. Researchers at Tel Aviv University found what they called “severe” cryptographic design flaws that could have let attackers siphon the...