15 matches found
CVE-2026-47198
Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.1, the checkout component improperly filters URL-writable properties, allowing authenticated users to inject arbitrary key-value pairs into server provisioning parameters. Because...
CVE-2026-47198
Paymenter prior to 1.5.1 is vulnerable to URL parameter injection in the Checkout component. The Checkout Livewire property $checkoutConfig is exposed via URL query parameters, and validation rules are generated only for keys defined by an extension’s getCheckoutConfig(). Undefined keys bypass va...
CVE-2026-47198 Paymenter: URL parameter injection bypasses paid plan limits at checkout
Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.1, the checkout component improperly filters URL-writable properties, allowing authenticated users to inject arbitrary key-value pairs into server provisioning parameters. Because...
Paymenter has URL parameter injection that bypasses paid plan limits at checkout
Summary The checkout component improperly filters URL-writable properties, allowing authenticated users to inject arbitrary key-value pairs into server provisioning parameters. Because bundled server extensions prioritize these user-supplied properties over administrator-defined configurations, a...
GHSA-5Q4Q-834J-G8G4 Paymenter has URL parameter injection that bypasses paid plan limits at checkout
Summary The checkout component improperly filters URL-writable properties, allowing authenticated users to inject arbitrary key-value pairs into server provisioning parameters. Because bundled server extensions prioritize these user-supplied properties over administrator-defined configurations, a...
EUVD-2015-6794
Malware in sbrugna...
Foreman Security Vulnerabilities
Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides service provisioning, configuration management, and status reporting. A security vulnerability exists in Foreman that stems from a sensitive information disclosure vulnerability...
Foreman Security Vulnerabilities
Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides service provisioning, configuration management, and status reporting. Foreman has a security vulnerability that can be exploited by a local attacker to expose passwords...
Provisioning services--Connection Timeout Expired when adding a new server to an existing farm
The following error can be seen trying to add a PVS server to an exisiting farm. "Connection timeout expired. The timeout period elapsed while attempting to consume the pre-login handshake acknowledgement. The could be because the pre-login handshake failed or the server was unable to respond pac...
CVE-2015-6858
HP Insight Control server provisioning before 7.5.0 RabbitMQ allows remote attackers to obtain sensitive information via unspecified vectors...
Design/Logic Flaw
HP Insight Control server provisioning before 7.5.0 RabbitMQ allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2015-6858
HP Insight Control Server Provisioning (HP) is affected by CVE-2015-6858 due to a vulnerability in the RabbitMQ component used by the server provisioning feature prior to version 7.5.0. The issue enables remote attackers to obtain sensitive information via unspecified vectors. The provided docume...
HP Insight Control Server Provisioning Information Disclosure Vulnerability
HP Insight Control Server Provisioning is a set of server management tools. The tool supports managing server health, deploying and quickly migrating servers, and more. A security vulnerability exists in HP Insight Control Server Provisioning, which allows remote attackers to exploit the...
