CVE-2024-50944

CVE-2024-50944 Description SimplCommerce is affected by an integer overflow vulnerability in the cart logic, allowing manipulation of product quantities and total prices via crafted quantity parameters. Detection Method An attacker can detect this vulnerability by adding a product to the cart wit...

TERM1B1TB0T

TERMI₿IT₿OT 🤖 A basic tool that tracks Bitcoin transactions in real time above or below a particular price target using a websocket API on your terminal. STEP-BY-STEP: WINDOWS -Step 1: Install Python if not already installed Download from python.org During install → make sure to check ✅ “Add Pyth...

CVE-2025-48129

🚨 CVE-2025-48129 - Privilege Escalation in WordPress Spreadsheet Price Changer Plugin 🛡️ Vulnerability Summary Plugin Affected : Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light Vulnerable Versions : Classified under: OWASP A7 – Identification and Authentication Failures 🧪...

Malware in sc-hydrate-carousel-price

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2023-49988

CVE-2023-49988 Hotel Booking Management v1.0 - SQL Injection Vulnerability in the "npss" parameter at rooms.php Description : A SQL Injection vulnerability exists in version 1 of the Hotel Booking Management. A malicious attacker can issue SQL commands to the MySQL database when editing the price...

CVE-2025-22510

CVE-2025-22510 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name WC Price History for Omnibus Vulnerable version To activate this plugin, the WooCommerce plugin must first be installed and activated. 2. To test the PHP Object Inj...

CVE-2026-116605

A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-side security. It is possible to launch the attack remotely. Th...

EUVD-2026-110565

A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-side security. It is possible to launch the attack remotely. Th...

PT-2026-125537

A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-side security. It is possible to launch the attack remotely. Th...

Malicious code in sc-hydrate-carousel-price (npm)

Source: amazon-inspector fbcb760747e0ad33cc6bafa85914d99b141f5361c13c5c642122d1ea8f973d9f package.json declares a dependency ltidisafe whose source is a bare HTTPS tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-4.0.3.tgz rather than a registry version range. On npm install,...

Malicious Package

Overview sc-hydrate-carousel-price is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2026-18291 Malicious code in sc-hydrate-carousel-price (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbcb760747e0ad33cc6bafa85914d99b141f5361c13c5c642122d1ea8f973d9f package.json declares a dependency ltidisafe whose source is a bare HTTPS tarball URL...

Malicious code in sc-hydrate-carousel-price (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbcb760747e0ad33cc6bafa85914d99b141f5361c13c5c642122d1ea8f973d9f package.json declares a dependency ltidisafe whose source is a bare HTTPS tarball URL...

CVE-2026-115450

External Control of Assumed-Immutable Web Parameter CWE-472 in the cart and checkout flow of MarcosCamara01 Ecommerce Template allows an authenticated user with no special privileges to be charged the price of one product while placing an order for another, because POST /api/user/cart accepts...

EUVD-2026-108212

External Control of Assumed-Immutable Web Parameter CWE-472 in the cart and checkout flow of MarcosCamara01 Ecommerce Template allows an authenticated user with no special privileges to be charged the price of one product while placing an order for another, because POST /api/user/cart accepts...

CVE-2026-115450 Price manipulation in the Ecommerce Template checkout flow through a client supplied Stripe price identifier

External Control of Assumed-Immutable Web Parameter CWE-472 in the cart and checkout flow of MarcosCamara01 Ecommerce Template allows an authenticated user with no special privileges to be charged the price of one product while placing an order for another, because POST /api/user/cart accepts...

CVE-2026-115450 Price manipulation in the Ecommerce Template checkout flow through a client supplied Stripe price identifier

External Control of Assumed-Immutable Web Parameter CWE-472 in the cart and checkout flow of MarcosCamara01 Ecommerce Template allows an authenticated user with no special privileges to be charged the price of one product while placing an order for another, because POST /api/user/cart accepts...

CVE-2026-115450

The MarcosCamara01 Ecommerce Template contains a price manipulation vulnerability (CWE-472 ) within its cart and checkout flow. The POST /api/user/cart endpoint independently accepts variantId (used for order records) and stripeId (used for Stripe charges) without verifying their association. An ...

CVE-2026-94502

In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted...

CVE-2026-66282

In EmberZNet 9.1.1 and earlier, a malformed Publish Billing Period command can result in a recursive function call that will never reach its end condition. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted...