CVE-2021-40908: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...

Sourcecodester Purchase Order Management System SQL注入漏洞

Sourcecodester Purchase Order Management System is a simple purchase order management system used to manage the purchase order records of a particular company. SQL injection vulnerability exists in Sourcecodester Purchase Order Management System, which Sourcecodester Purchase Order Management...

PT-2022-11336

Name of the Vulnerable Software and Affected Versions Sourcecodester Purchase Order Management System version v1 Description The issue allows attackers to execute arbitrary SQL commands via the username parameter in the Login.php file. This enables attackers to manipulate the database, potentiall...

MixinPurchase:shareKey allows to generate keys without purchasing

Handle GiveMeTestEther Vulnerability details Impact the shareKey function allows a user to share some time with another user that doesn't already has/had a key and this generates a new key. This even allows to generate more keys than maxNumberOfKeys. attacker generates a lot of EOA adresses, buys...

Retail Data Needs Better Security in a Contextual World

Do you remember the first time you made an online purchase? Me neither. I’ve made so many online purchases over the years, and I’ve probably made more in the past 18 months than in the past 5 years combined...

CVE-2021-26786

An issue was discoverered in in customercentric-selling-poland PlayTube, allows authenticated attackers to execute arbitrary code via the purchace code to the config.php...

PT-2021-17132

Name of the Vulnerable Software and Affected Versions PlayTube affected versions not specified Description An issue was discovered in PlayTube, allowing authenticated attackers to execute arbitrary code via the purchase code to the config.php. Recommendations At the moment, there is no informatio...

PlayTube 代码问题漏洞

PlayTube is a PHP-based video sharing platform. A code issue vulnerability exists in PlayTube, which stems from an error in the purchase in the product config.php file. The vulnerability can be exploited to execute arbitrary code...

CVE-2021-26786: Undefined Security Weakness

An issue was discoverered in in customercentric-selling-poland PlayTube, allows authenticated attackers to execute arbitrary code via the purchace code to the config.php...

How to build a password cracking rig during a worldwide chip shortage

… and keep a domain password auditing service online. Making money on GPUs, the hard way… At PTP we had a fairly decent GPU password cracking box called Titan. It used 4×1080 GPUs and had an NTLM hash rate of around 180GH/s. Several years ago I realised that the box was sitting idle much of the...

CVE-2020-18477

SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message concontent field...

CVE-2020-18477

SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message concontent field...

Sql injection

SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message concontent field...

CVE-2020-18477

SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message concontent field...

PT-2021-10189

Name of the Vulnerable Software and Affected Versions: Hucart CMS version 5.7.4 Description: The issue is related to a SQL Injection vulnerability. It can be exploited via the purchase enquiry field found in the Message con content field. Recommendations: For Hucart CMS version 5.7.4, at the...

CVE-2020-18477: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message concontent field...

Baidu Love Sourcing Seller APP has information leakage vulnerability

Baidu Love Purchase Seller App is a client application that facilitates sellers to conveniently handle customer information. Baidu Love Purchase Seller App has an information leakage vulnerability that can be exploited by attackers to backup the app and obtain sensitive information...

Users can avoid paying borrowing interest after the fyToken matures

Handle shw Vulnerability details Impact According to the protocol design, users have to pay borrowing interest when repaying the debt with underlying tokens after maturity. However, a user can give his vault to Witch and then buy all his collateral using underlying tokens to avoid paying the...

Reddit: IDOR to pay less for coin purchases on oauth.reddit.com via /api/v2/gold/paypal/create_coin_purchase_order in `order_id` parameter

Summary: This vulnerability consist of modifying the PayPal transaction ID to buy a big coin pack but paying the small price for it. Impact: The only impact here could be that you don't earn the money you deserve, and users can offer a lot of presents to other users, breaking the magic of the...

Google Argentina domain bought by a random citizen for $5

By Deeba Ahmed A random Argentinian bought the official Google Argentina domain for just $5 and as a result, the site was offline in the country for hours. This is a post from HackRead.com Read the original post: Google Argentina domain bought by a random citizen for $5...