CVE-2022-0954

Multiple Stored Cross-site Scripting XSS Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in GitHub repository microweber/microweber prior to 1.2.11...

CVE-2022-0954 Multiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in microweber/microweber

Multiple Stored Cross-site Scripting XSS Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in GitHub repository microweber/microweber prior to 1.2.11...

CVE-2021-4031

Syltek application before its 10.22.00 version, does not correctly check that a product ID has a valid payment associated to it. This could allow an attacker to forge a request and bypass the payment system by marking items as payed without any verification...

WordPress Accept Stripe Payments plugin <= 2.0.53 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Accept Stripe Payments plugin versions = 2.0.53. Solution Update the WordPress Accept Stripe Payments plugin to the latest available version at least 2.0.54...

CVE-2022-26661

An XXE issue was discovered in Tryton Application Platform Server 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform Command Line Client proteus 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An authenticated user...

New US Law to Require Cyber Incident Reports

The US Congress is poised to pass the Cyber Incident Reporting for Critical Infrastructure Act of 2022. Once signed by the President, it will become law. The law will require critical infrastructure owners and operators to report cyber incidents and ransomware payments. The legislation was...

5 Key Benefits of Digitalizing Your Business’ Payments and Collections

By Owais Sultan As a business person, you become more empowered if you know more about your cash flow and how… This is a post from HackRead.com Read the original post: 5 Key Benefits of Digitalizing Your Business’ Payments and Collections...

U.S. Senate Passes Cybersecurity Bill to Strengthen Critical Infrastructure Security

The U.S. Senate unanimously passed the "Strengthening American Cybersecurity Act" on Tuesday in an attempt to bolster the cybersecurity of critical infrastructure owners in the country. The new bipartisan legislation, among other things, stipulates entities that experience a cyber incident to...

WordPress WooCommerce – Country Based Payments plugin <= 1.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WooCommerce – Country Based Payments plugin versions = 1.4. Solution Update the WordPress WooCommerce – Country Based Payments plugin to the latest available version at least 1.4.1...

WordPress WooCommerce – Country Based Payments plugin <= 1.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WooCommerce – Country Based Payments plugin versions = 1.4. Solution Update the WordPress WooCommerce – Country Based Payments plugin to the latest available version at least 1.4.1...

WordPress China Payments plugin <= 2.3.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress China Payments plugin versions = 2.3.6. Solution Update the WordPress China Payments plugin to the latest available version at least 3.0.0...

WordPress Quick Paypal Payments plugin < 5.7.22 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Quick Paypal Payments plugin versions 5.7.22. Solution Update the WordPress Quick Paypal Payments plugin to the latest available version at least 5.7.22...

WordPress China Payments plugin <= 2.3.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress China Payments plugin versions = 2.3.6. Solution Update the WordPress China Payments plugin to the latest available version at least 3.0.0...

WordPress Quick Paypal Payments plugin < 5.7.22 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Quick Paypal Payments plugin versions 5.7.22. Solution Update the WordPress Quick Paypal Payments plugin to the latest available version at least 5.7.22...

WordPress WPFormify – Stripe Payments with Form and Checkout plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WPFormify – Stripe Payments with Form and Checkout plugin versions = 1.0.0. Solution Update the WordPress WPFormify – Stripe Payments with Form and Checkout plugin to the latest available version at...

WordPress WPFormify – Stripe Payments with Form and Checkout plugin <= 1.0.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WPFormify – Stripe Payments with Form and Checkout plugin versions = 1.0.0. Solution Update the WordPress WPFormify – Stripe Payments with Form and Checkout plugin to the latest available version at least 1.1.0...

WordPress Quick Paypal Payments plugin < 5.7.22 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Quick Paypal Payments plugin versions 5.7.22. Solution Update the WordPress Quick Paypal Payments plugin to the latest available version at least 5.7.22...

The vulnerability of Google Chrome’s Payments component, which allows a hacker to access confidential information

The vulnerability of Google Chrome’s Payments component is related to the use of memory after deallocation. Exploiting this vulnerability can allow an attacker to gain access to confidential information through a specially created web page...

Denial Of Service (DoS)

chrome is vulnerable to denial of service. The vulnerability exists due to a use after free in payments...

IBM Financial Transaction Manager Authorization Issue Vulnerability (CNVD-2022-08965)

IBM Financial Transaction Manager is a financial transaction manager from IBM Corporation in the United States. The product is primarily used to monitor, track and report financial payments and transactions. IBM Financial Transaction Manager 3.2.4 contains an authorization issue vulnerability tha...