CVE-2023-38353

MiniTool Power Data Recovery version 11.6 and before contains an insecure in-app payment system that allows attackers to steal highly sensitive information through a man in the middle attack...

CVE-2023-38353

MiniTool Power Data Recovery version 11.6 and before contains an insecure in-app payment system that allows attackers to steal highly sensitive information through a man in the middle attack...

Design/Logic Flaw

MiniTool Power Data Recovery version 11.6 and before contains an insecure in-app payment system that allows attackers to steal highly sensitive information through a man in the middle attack...

CVE-2023-38353

MiniTool Power Data Recovery version 11.6 and before contains an insecure in-app payment system that allows attackers to steal highly sensitive information through a man in the middle attack...

CVE-2023-38353

Affected software: MiniTool Power Data Recovery, version 11.6 and earlier. Vulnerability: insecure in-app payment system that enables a man-in-the-middle attack to exfiltrate highly sensitive information. Impact: information disclosure due to compromised payment flow; no other impacts stated. Roo...

CVE-2023-38353

MiniTool Power Data Recovery version 11.6 and before contains an insecure in-app payment system that allows attackers to steal highly sensitive information through a man in the middle attack...

Cloudflare Public Bug Bounty: Bypass R2 payment screen

The R2 payment screen bypass vulnerability was reported. Due to insufficient access control checks, it had been possible to enable the R2 subscription without having a valid payment method stored. Cloudflare addressed the issue by implementing stricter access controls around subscription enableme...

CVE-2023-4231

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cevik Informatics Online Payment System allows SQL Injection.This issue affects Online Payment System: before 4.09...

CVE-2023-4231

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cevik Informatics Online Payment System allows SQL Injection. This issue affects Online Payment System: before 4.09...

CVE-2023-4231

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cevik Informatics Online Payment System allows SQL Injection. This issue affects Online Payment System: before 4.09...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cevik Informatics Online Payment System allows SQL Injection.This issue affects Online Payment System: before 4.09...

MAL-2023-8107 Malicious code in payment-react-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1be5313ebc025cf120f74736aba05ea6e53d94fb39c36b1097c2803a7f7d70de The OpenSSF Package Analysis project identified 'payment-react-component' @ 1.5.0 npm as malicious. It is considered malicious because: - The...

Malicious code in payment-react-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1be5313ebc025cf120f74736aba05ea6e53d94fb39c36b1097c2803a7f7d70de The OpenSSF Package Analysis project identified 'payment-react-component' @ 1.5.0 npm as malicious. It is considered malicious because: - The...

CVE-2023-4231

CVE-2023-4231 affects Cevik Informatics Online Payment System (versions prior to 4.09). The root cause is improper neutralization of specific elements used in SQL commands, enabling an SQL Injection. CVSSv3.1 metrics (NETWORK, LOW ATTACK COMPLEXITY, NONE PRIVILEGES, UI NONE) yield a CRITICAL 9.8 ...

CVE-2023-4231 SQLi in Cevik Informatics' Online Payment System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cevik Informatics Online Payment System allows SQL Injection. This issue affects Online Payment System: before 4.09...

CVE-2023-4231 SQLi in Cevik Informatics' Online Payment System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cevik Informatics Online Payment System allows SQL Injection. This issue affects Online Payment System: before 4.09...

Cevik Informatics Online Payment System SQL Injection Vulnerability

Cevik Informatics Online Payment System is an online payment system from Cevik Informatics. A SQL injection vulnerability exists in Cevik Informatics Online Payment System versions prior to 4.09, which stems from incorrect neutralization of specific elements used by the system...

PCI DSS v4: Uncovering Web Skimming Threats with Payment Integrations

...

CVE-2023-4948

The WooCommerce CVR Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the refreshordercvrdata AJAX action in versions up to 6.1.0. This makes it possible for authenticated attackers with contributor-level access and above,...

Design/Logic Flaw

The WooCommerce CVR Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the refreshordercvrdata AJAX action in versions up to 6.1.0. This makes it possible for authenticated attackers with contributor-level access and above,...