Attention Online Shoppers: Don't Be Fooled by Their Sleek, Modern Looks — It's Magecart!

An ongoing Magecart campaign has attracted the attention of cybersecurity researchers for leveraging realistic-looking fake payment screens to capture sensitive data entered by unsuspecting users. "The threat actor used original logos from the compromised store and customized a web element known ...

Attention Online Shoppers: Don't Be Fooled by Their Sleek, Modern Looks — It's Magecart!

An ongoing Magecart campaign has attracted the attention of cybersecurity researchers for leveraging realistic-looking fake payment screens to capture sensitive data entered by unsuspecting users. "The threat actor used original logos from the compromised store and customized a web element known ...

PT-2025-49652

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A memory leak was identified in the nvme-core component of the Linux kernel, specifically within the dhchap ctrl secret store function. The issue occurs when nvme auth generate key retur...

PT-2025-49743

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the nvme-core module, specifically within the dhchap secret store function. The issue involves failing to free the dhchap secret memory before...

Fedora: Security Advisory for redis (FEDORA-2023-04239b5758)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross-site Scripting (XSS) in DataObject Classification Store

Impact This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Patches Update to version 10.5.21 or apply this patch manually...

GHSA-9Q7Q-R54Q-3F3G Cross-site Scripting (XSS) in DataObject Classification Store

Impact This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Patches Update to version 10.5.21 or apply this patch manually...

MAL-2023-1306 Malicious code in store-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4462b056f6144f0a42e19147fcc9c5a0277e45631c26bebad88d24513995b773 The OpenSSF Package Analysis project identified 'store-js-sdk' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in store-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4462b056f6144f0a42e19147fcc9c5a0277e45631c26bebad88d24513995b773 The OpenSSF Package Analysis project identified 'store-js-sdk' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

[SECURITY] Fedora 36 Update: redis-6.2.12-1.fc36

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

[SECURITY] Fedora 38 Update: redis-7.0.11-1.fc38

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

Online Book Store 1.0 SQL Injection

Exploit Title: Online Book Store 1.0 - process.php SQL injection Google Dork: 4/26/2023 Exploit Author: Or4nG.M4n Vendor Homepage: https://projectworlds.in/free-projects/php-projects/online-book-store-project-in-php/ Software Link:...

Microweber Information Disclosure Vulnerability (CNVD-2023-32768)

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images and more. A security vulnerability exists in Microweber versions prior to 1.3.4, which stems from...

CVE-2023-2242

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component GET Parameter Handler. The manipulation of the argument c/s leads to sql injection. The attack can be...

CVE-2023-2242 SourceCodester Online Computer and Laptop Store GET Parameter sql injection

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component GET Parameter Handler. The manipulation of the argument c/s leads to sql injection. The attack can be...

CVE-2023-2242

The CVE-2023-2242 entry concerns SourceCodester Online Computer and Laptop Store 1.0. The vulnerability affects the GET Parameter Handler, where manipulation of the c/s parameter leads to SQL injection. It is a remotely exploitable issue and, per the CVE description, the exploit has been disclose...

CVE-2023-2242: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component GET Parameter Handler. The manipulation of the argument c/s leads to sql injection. The attack can be...

PT-2023-18486 · Sourcecodester · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical issue has been found in the component GET Parameter Handler, where the manipulation of the c/s argument leads to sql injection. This issue can be exploited...

SQL Injection Vulnerability in Online Computer and Laptop Stores

Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Online Computer and Laptop Store version 1.0, which stems from a problem with the component GET Parameter Handler, where manipulation...

CVE-2023-2208

A vulnerability, which was classified as critical, has been found in Campcodes Retro Basketball Shoes Online Store 1.0. This issue affects some unknown processing of the file details.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit...