44 matches found
Gpt-Agreement-Payment
简体中文 | English Gpt-Agreement-Payment ChatGPT Plus / Team サブスクリプション契約のエンドツーエンドリプレイツール：パケットキャプチャから Stripe Checkout → PayPal / GoPay / QRIS → ChatGPT manual-approval → Codex OAuth + PKCE の全チェーンをリバースエンジニアリングし、実行可能なクライアントとして実装。ゼロから実装した hCaptcha ビジュアルソルバー、PayPal...
CVE-2026-96838
Unauthenticated Cross Site Request Forgery CSRF in Blacklist Manager WooCommerce Anti-Fraud, Blacklist & Checkout Verification = 2.3.1 versions...
CVE-2026-96838 WordPress Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Blacklist Manager WooCommerce Anti-Fraud, Blacklist & Checkout Verification = 2.3.1 versions...
CVE-2026-96838 WordPress Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Blacklist Manager WooCommerce Anti-Fraud, Blacklist & Checkout Verification = 2.3.1 versions...
EUVD-2026-89890
Unauthenticated Cross Site Request Forgery CSRF in Blacklist Manager WooCommerce Anti-Fraud, Blacklist & Checkout Verification = 2.3.1 versions...
CVE-2026-96838
The Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification plugin for WordPress (versions
EUVD-2026-37615
Unauthenticated Broken Access Control in WooCommerce Anti-Fraud = 7.2.6 versions...
CVE-2026-49072
Unauthenticated Broken Access Control in WooCommerce Anti-Fraud = 7.2.6 versions...
CVE-2026-49072 WordPress WooCommerce Anti-Fraud plugin <= 7.2.6 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WooCommerce Anti-Fraud = 7.2.6 versions...
CVE-2026-49072
The CVE-2026-49072 entry covers a Broken Access Control issue in the WordPress WooCommerce Anti-Fraud plugin (versions
CVE-2026-49072 WordPress WooCommerce Anti-Fraud plugin <= 7.2.6 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WooCommerce Anti-Fraud = 7.2.6 versions...
PT-2026-50334
Unauthenticated Broken Access Control in WooCommerce Anti-Fraud = 7.2.6 versions...
CVE-2026-49072: Missing Authorization
Unauthenticated Broken Access Control in WooCommerce Anti-Fraud = 7.2.6 versions...
WordPress WooCommerce Anti-Fraud plugin <= 7.2.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Austin Ginder in WordPress Plugin WooCommerce Anti-Fraud versions = 7.2.6...
MAL-2025-6240 Malicious code in xp-anti-fraud-js-lib (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f4628140ad8ca2bfe8fde97530e932f9f26df49b3841157bc7f8aa50535e77f7 The OpenSSF Package Analysis project identified 'xp-anti-fraud-js-lib...
Malicious code in xp-anti-fraud-js-lib (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f4628140ad8ca2bfe8fde97530e932f9f26df49b3841157bc7f8aa50535e77f7 The OpenSSF Package Analysis project identified 'xp-anti-fraud-js-lib...
New Grandoreiro Banking Malware Variants Emerge with Advanced Tactics to Evade Detection
New variants of a banking malware called Grandoreiro have been found to adopt new tactics in an effort to bypass anti-fraud measures, indicating that the malicious software is continuing to be actively developed despite law enforcement efforts to crack down on the operation. "Only part of this ga...
Grandoreiro, the global trojan with grandiose goals
Grandoreiro is a well-known Brazilian banking trojan — part of the Tetrade umbrella — that enables threat actors to perform fraudulent banking operations by using the victim's computer to bypass the security measures of banking institutions. It's been active since at least 2016 and is now one of...
New Leak Shows Business Side of China’s APT Menace
A new data leak that appears to have come from one of Chinas top private cybersecurity firms provides a rare glimpse into the commercial side of Chinas many state-sponsored hacking groups. Experts say the leak illustrates how Chinese government agencies increasingly are contracting out foreign...
Hackers Targeting Italian Corporate Banking Clients with New Web-Inject Toolkit DrIBAN
Italian corporate banking clients are the target of an ongoing financial fraud campaign that has been leveraging a new web-inject toolkit called drIBAN since at least 2019. "The main goal of drIBAN fraud operations is to infect Windows workstations inside corporate environments trying to alter...