com.shopizer:shopizer-shipping-canadapost-module (>=0.0.1 <=2.11.0), com.shopizer:shopizer-shipping-distance-processor (=2.0.3) +1 more potentially affected by CVE-2020-11007 via com.shopizer:sm-core-model (>=2.0.2 <=2.10.0)

com.shopizer:sm-core-model MAVEN version =2.0.2, =0.0.1, =2.0.2, =2.0.3 Source cves: CVE-2020-11007 Source advisory: OSV:GHSA-W8RC-PGXQ-X2CJ...

Oil and Gas Firms Targeted With Agent Tesla Spyware

Attackers are targeting energy companies with the Agent Tesla spyware, as seen in recent spearphishing emails with malicious attachments. Researchers say that until now, Agent Tesla has not been associated with campaigns targeting the oil-and-gas vertical. The emails leverage the tumultuous natur...

Logic Flaw Vulnerability in Shining Networks Virtual Goods Auto-Shipping System (Ship 100) (CNVD-2020-27473)

Shipping 100 is a virtual goods autoship system/article pay to read system. Shining Networks Virtual Goods Auto-Shipping System Ship 100 has a logic flaw vulnerability, which can be exploited through this level of transgression vulnerability, you can delete arbitrary use of information...

XSS Vulnerability in Shipping 100 Virtual Goods Autoship System (CNVD-2020-25886)

Shipping 100 Virtual Goods Autoship System is a virtual goods autoship system/article pay to read system. Shipping 100 Virtual Goods Autoship System has an XSS vulnerability that can be exploited by attackers to execute malicious scripts and obtain an administrator cookie...

Microdistribution has a flawed logic vulnerability

Micro Distribution is a WeChat distribution platform tailored for businesses. Micro distribution has a logic flaw vulnerability, an attacker can use the vulnerability to overstep the right to modify the entire network of users' shipping address information...

SQL Injection Vulnerability in Shipping 100 System co***.php Page

Shipping 100 System is a virtual goods autoship system/article pay to read system. A SQL injection vulnerability exists in the co.php page of the Shipment 100 system, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Shipping 100 Enterprise Official Website Template me***.php

Shipping 100 System is a virtual goods autoship system/article pay to read system. Shipping100 enterprise official website template me.php has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Shipping 100 Virtual Goods Autoship System

Shipping 100 Virtual Goods Autoship System is a virtual goods autoship system/article pay to read system. Shipping 100 Virtual Goods Autoship System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in the ad***.php page of the Shipping 100 Virtual Goods Autoship system

Shipping 100 Virtual Goods Autoship System is a virtual goods autoship system/article pay to read system. SQL injection vulnerability exists in the ad.php page of the Shipment 100 virtual goods autoship system, which can be exploited by attackers to obtain sensitive information from the database...

XSS Vulnerability in Shipping 100 Virtual Goods Autoship System

Shipping 100 Virtual Goods Autoship System is a virtual goods autoship system/article pay to read system. Shipping 100 Virtual Goods Autoship System has an XSS vulnerability that can be exploited by attackers to obtain administrator cookie information...

Arbitrary File Deletion Vulnerability in Shipping 100 Virtual Goods Autoship System

Shipping 100 Virtual Goods Autoship System is a virtual goods autoship system/article pay to read system. Ship 100 Virtual Goods Autoship System has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files...

SQL Injection Vulnerability in Shipping 100 System (CNVD-2020-10185)

Shipping 100 System is a virtual goods autoship system/article pay to read system. A SQL injection vulnerability exists in Shipment 100 System, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Shipping 100 System (CNVD-2020-10187)

Shipping 100 System is a virtual goods autoship system/article pay to read system. A SQL injection vulnerability exists in Shipment 100 System, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Shipping 100 System (CNVD-2020-10186)

Shipping 100 System is a virtual goods autoship system/article pay to read system. A SQL injection vulnerability exists in Shipment 100 System, which can be exploited by attackers to obtain sensitive information...

Magento Marketplace Suffers Data Breach Exposing Users' Account Info

If you have ever registered an account with the official Magento marketplace to bought or sold any extension, plugin, or e-commerce website theme, you must change your password immediately. Adobe—the company owning Magento e-commerce platform—today disclosed a new data breach incident that expose...

Magento Marketplace Suffers Data Breach Exposing Users' Account Info

If you have ever registered an account with the official Magento marketplace to bought or sold any extension, plugin, or e-commerce website theme, you must change your password immediately. Adobe—the company owning Magento e-commerce platform—today disclosed a new data breach incident that expose...

OnePlus Suffers New Data Breach Impacting Its Online Store Customers

Chinese smartphone maker OnePlus has suffered a new data breach exposing personal and order information of an undisclosed number of its customers, likely, as a result of a vulnerability in its online store website. The breach came to light after OnePlus started informing affected customers via...

WordPress YITH WooCommerce PDF Invoice and Shipping List plugin <=1.2.12 - Authenticated Settings Change (YITH Plugin Framework <=3.3.8) vulnerability

Authenticated Settings Change YITH Plugin Framework =3.3.8 vulnerability found by Jerome Bruandet in WordPress YITH WooCommerce PDF Invoice and Shipping List plugin versions =1.2.12. Solution Update the WordPress YITH WooCommerce PDF Invoice and Shipping List plugin to the latest available versio...

CVE-2019-18608

Cezerin v0.33.0 allows unauthorized order-information modification because certain internal attributes can be overwritten via a conflicting name when processing order requests. Hence, a malicious customer can manipulate an order e.g., its payment status or shipping fee by adding additional...

Information disclosure

Cezerin v0.33.0 allows unauthorized order-information modification because certain internal attributes can be overwritten via a conflicting name when processing order requests. Hence, a malicious customer can manipulate an order e.g., its payment status or shipping fee by adding additional...