Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

23 matches found

NVD
NVD•added 2026/09/09 9:17 a.m.•9 views

CVE-2026-16272

Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Exploitation of Trusted Identifiers. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

9.1CVSS0.00144EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/09/09 8:17 a.m.•11 views

EUVD-2026-74769

Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Exploitation of Trusted Identifiers. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

9.1CVSS5.8AI score0.00144EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/09/09 8:17 a.m.•38 views

CVE-2026-16272 Client IP Spoofing via Untrusted HTTP Headers in PayTR's PayTR Virtual Pos iFrame API (v9x) WHMCS Module

Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Exploitation of Trusted Identifiers. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

9.1CVSS0.00144EPSS
SaveExploits0References1
CVE
CVE•added 2026/09/09 8:17 a.m.•31 views

CVE-2026-16272

PayTR Virtual Pos iFrame API (v9x) WHMCS Module (versions v9.0.0 through before v9.0.3) is affected by a client IP spoofing vulnerability caused by use of less trusted source —specifically, untrusted HTTP headers are relied upon for identifying the client IP, allowing exploitation of trusted iden...

9.1CVSS5.8AI score0.00144EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/09/09 8:17 a.m.•11 views

CVE-2026-16272 Client IP Spoofing via Untrusted HTTP Headers in PayTR's PayTR Virtual Pos iFrame API (v9x) WHMCS Module

Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Exploitation of Trusted Identifiers. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

9.1CVSS5.8AI score0.00144EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/09/09 12:00 a.m.•3 views

CVE-2026-16272: Use of Less Trusted Source

Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Exploitation of Trusted Identifiers. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

9.1CVSS5.8AI score0.00144EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2026/09/09 12:00 a.m.•11 views

PT-2026-88898

Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Exploitation of Trusted Identifiers. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

9.1CVSS5.8AI score0.00144EPSS
SaveExploits0References2
NVD
NVD•added 2026/09/08 4:18 p.m.•9 views

CVE-2026-16025

Improper validation of specified quantity in input vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Input Data Manipulation. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

7.5CVSS0.00324EPSS
SaveExploits0References1
NVD
NVD•added 2026/09/08 4:18 p.m.•9 views

CVE-2026-16037

Observable timing discrepancy vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Black Box Reverse Engineering. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

7.5CVSS0.00303EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/09/08 3:12 p.m.•34 views

CVE-2026-16037 Callback Authentication Bypass via Timing Attack in PayTR's PayTR Virtual Pos iFrame API (v9x) WHMCS Module

Observable timing discrepancy vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Black Box Reverse Engineering. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

7.5CVSS0.00303EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/09/08 3:12 p.m.•11 views

EUVD-2026-72853

Observable timing discrepancy vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Black Box Reverse Engineering. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

7.5CVSS5.7AI score0.00303EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/09/08 3:12 p.m.•12 views

CVE-2026-16037 Callback Authentication Bypass via Timing Attack in PayTR's PayTR Virtual Pos iFrame API (v9x) WHMCS Module

Observable timing discrepancy vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Black Box Reverse Engineering. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

7.5CVSS5.7AI score0.00303EPSS
SaveExploits0References1
CVE
CVE•added 2026/09/08 3:12 p.m.•30 views

CVE-2026-16037

CVE-2026-16037 is an observable timing discrepancy in the PayTR Virtual Pos iFrame API (v9x) WHMCS Module (versions v9.0.0 through before v9.0.3) that allows a callback authentication bypass via timing attack , enabling black box reverse engineering . The CNA-assigned CVSS 3.1 score is 7.5 (HIGH)...

7.5CVSS5.7AI score0.00303EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/09/08 3:06 p.m.•10 views

CVE-2026-16025 Improper Payment Validation in PayTR's PayTR Virtual Pos iFrame API (v9x) WHMCS Module

Improper validation of specified quantity in input vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Input Data Manipulation. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

7.5CVSS5.7AI score0.00324EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/09/08 3:06 p.m.•32 views

CVE-2026-16025 Improper Payment Validation in PayTR's PayTR Virtual Pos iFrame API (v9x) WHMCS Module

Improper validation of specified quantity in input vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Input Data Manipulation. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

7.5CVSS0.00324EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/09/08 3:06 p.m.•13 views

EUVD-2026-72852

Improper validation of specified quantity in input vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Input Data Manipulation. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

7.5CVSS5.7AI score0.00324EPSS
SaveExploits0References1
CVE
CVE•added 2026/09/08 3:06 p.m.•30 views

CVE-2026-16025

CVE-2026-16025 affects PayTR Virtual Pos iFrame API (v9x) WHMCS Module from PayTR Payment and Electronic Money Institution Inc. The vulnerability stems from improper validation of the specified quantity in the input, allowing Input Data Manipulation . Affected versions are from v9.0.0 before v9.0...

7.5CVSS5.7AI score0.00324EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/09/08 12:00 a.m.•1 views

CVE-2026-16037: Observable Timing Discrepancy

Observable timing discrepancy vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Black Box Reverse Engineering. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

7.5CVSS5.8AI score0.00303EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/09/08 12:00 a.m.•2 views

CVE-2026-16025: Improper Validation of Specified Quantity in Input

Improper validation of specified quantity in input vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Input Data Manipulation. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

7.5CVSS5.8AI score0.00324EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2026/09/08 12:00 a.m.•15 views

PT-2026-87108

Improper validation of specified quantity in input vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Input Data Manipulation. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...

7.5CVSS5.7AI score0.00324EPSS
SaveExploits0References2
Rows per page
Query Builder