Lucene search
+L

38 matches found

Kitploit
Kitploit
•added 2026/10/09 11:10 p.m.•17 views

FakeDataGen

FakeDataGen هو مولد بيانات وهمية صالحة بالكامل. تساعدك هذه الأداة على إنشاء حسابات وهمية بتنسيق إسباني ببيانات صالحة بالكامل. ضمن هذه المعلومات، يمكنك العثور على الأسماء الأكثر شيوعًا، عناوين البريد الإلكتروني، التفاصيل المصرفية وغيرها من المعلومات المفيدة. المتطلبات Python 3 تثبيت ملف المتطلبات...

6.1AI score
SaveExploits0
NVD
NVD
•added 2026/08/21 1:18 p.m.•19 views

CVE-2026-77780

Authorization Bypass Through User-Controlled Key in the transaction save endpoint in Roskus Prospero Flow CRM 4.9.1 through 5.14.0 allows a user with transaction and accounting creation permissions to disclose another company's bank account name, bank name and card last four digits via a...

5.3CVSS0.00439EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/21 12:00 a.m.•29 views

PT-2026-79384

Authorization Bypass Through User-Controlled Key in the transaction save endpoint in Roskus Prospero Flow CRM 4.9.1 through 5.14.0 allows a user with transaction and accounting creation permissions to disclose another company's bank account name, bank name and card last four digits via a bank...

5.3CVSS5.8AI score0.00439EPSS
SaveExploits0References4
Malwarebytes
Malwarebytes
•added 2026/07/22 11:34 a.m.•35 views

Paidwork breach exposes data of 23 million users: Check if you’re affected

A data breach at Paidwork, a platform that pays people small amounts to complete online microtasks, has exposed personal and financial information of more than 23 million users. According to public breach reports, the intrusion took place in March 2026, with the stolen database first advertised o...

5.3AI score
SaveExploits0
Malwarebytes
Malwarebytes
•added 2026/07/14 11:09 a.m.•28 views

Warning: Scammers are using FaceTime to empty bank accounts

Apple is urging users to treat any suspicious FaceTime call or message as untrusted, especially if it involves payments, refunds, password resets, or requests for personal information. This warning appears in a broader Apple support article about scams that target iPhone and iPad users through...

6.2AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2022-27688

Malicious code in bioql PyPI...

6.5CVSS7.3AI score0.00903EPSS
SaveExploits0References2
HackRead
HackRead
•added 2024/06/20 6:00 p.m.•19 views

UK Health Club Chain ‘Total Fitness’ Data Leak Exposes KYC and Card Data

UK-based health and fitness chain Total Fitness suffered a significant data breach leaving member photos, names, and even bank details vulnerable online. Learn how to protect yourself and what went wrong at Total Fitness...

7.2AI score
SaveExploits0
NVD
NVD
•added 2024/06/06 2:15 a.m.•37 views

CVE-2023-6966

The The Moneytizer plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss of data due to a missing capability check on multiple AJAX functions in the /core/coreajax.php file in all versions up to, and including, 9.6.3. This makes it possible for...

8.1CVSS7.8AI score0.00394EPSS
SaveExploits0References3
CVE
CVE
•added 2024/06/06 2:02 a.m.•81 views

CVE-2023-6966

The Moneytizer WordPress plugin (The Moneytizer) is vulnerable in versions up to 9.5.20 due to a missing capability check in core_ajax.php across multiple AJAX functions. This allows authenticated users with subscriber privileges and higher to view/update billing and bank details, adjust plugin s...

8.1CVSS5.9AI score0.00394EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2024/06/06 2:02 a.m.•65 views

CVE-2023-6968 The Moneytizer <= 9.6.3 - Cross-Site Request Forgery via multiple AJAX actions

The The Moneytizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 9.6.3. This is due to missing or incorrect nonce validation on multiple AJAX functions. This makes it possible for unauthenticated attackers to to update and retrieve billing...

8.1CVSS7.8AI score0.00196EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/06 12:00 a.m.•5 views

CVE-2023-6968: Improper Access Control

The The Moneytizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 9.6.3. This is due to missing or incorrect nonce validation on multiple AJAX functions. This makes it possible for unauthenticated attackers to to update and retrieve billing...

8.1CVSS5.5AI score0.00196EPSS
SaveExploits0References1
WPVulnDB
WPVulnDB
•added 2024/06/05 12:00 a.m.•18 views

The Moneytizer <= 9.5.20 - Missing Authorization via multiple AJAX actions

Description The The Moneytizer plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss of data due to a missing capability check on multiple AJAX functions in the /core/coreajax.php file in all versions up to, and including, 9.5.20. This makes it possible...

8.1CVSS6.4AI score0.00394EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/05 12:00 a.m.•24 views

PT-2024-15150 · WordPress · The Moneytizer

Name of the Vulnerable Software and Affected Versions: The Moneytizer plugin for WordPress versions up to, and including, 9.5.20 Description: The issue is due to missing or incorrect nonce validation on multiple AJAX functions, making it possible for unauthenticated attackers to update and retrie...

8.1CVSS6.8AI score0.00196EPSS
SaveExploits0References9
OSV
OSV
•added 2024/01/04 2:15 p.m.•16 views

CVE-2023-49658

Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'bankdetails' parameter of the partysubmit.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.00672EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/01/04 12:00 a.m.•22 views

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in the v1.0 version of Kashipara Billing Software, which originates when the bankdetails parameter of the partysubmit.php page is processed without filtering the data and sending it to the...

9.8CVSS7.9AI score0.00672EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/01/04 12:00 a.m.•26 views

PT-2024-13776 · Billing · Billing

Name of the Vulnerable Software and Affected Versions: Billing Software version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the bank details parameter of the "party submit.php" resource does not validate the characters received, and th...

9.8CVSS9.9AI score0.00672EPSS
SaveExploits1References5
OSV
OSV
•added 2022/02/09 11:15 p.m.•14 views

CVE-2022-22542

S/4HANA Supplier Factsheet exposes the private address and bank details of an Employee Business Partner with Supplier Role, AND Enterprise Search for Customer, Supplier and Business Partner objects exposes the private address fields of Employee Business Partners, to an actor that is not explicitl...

6.5CVSS6.9AI score0.00903EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/02/09 11:15 p.m.•14 views

CVE-2022-22542

S/4HANA Supplier Factsheet exposes the private address and bank details of an Employee Business Partner with Supplier Role, AND Enterprise Search for Customer, Supplier and Business Partner objects exposes the private address fields of Employee Business Partners, to an actor that is not explicitl...

6.5CVSS6.9AI score0.00903EPSS
SaveExploits0References4Affected Software1
Prion
Prion
•added 2022/02/09 11:15 p.m.•28 views

Information disclosure

S/4HANA Supplier Factsheet exposes the private address and bank details of an Employee Business Partner with Supplier Role, AND Enterprise Search for Customer, Supplier and Business Partner objects exposes the private address fields of Employee Business Partners, to an actor that is not explicitl...

4CVSS6.5AI score0.00903EPSS
SaveExploits0References2Affected Software1
Kitploit
Kitploit
•added 2021/11/27 11:30 a.m.•46 views

FakeDataGen - Full Valid Fake Data Generator

FakeDataGen is a Full Valid Fake Data Generator. This tool helps you to create fake accounts in Spanish format with fully valid data. Within this information, you can find the most common names, emails, bank details and other useful information. Requirements Python 3 Install requirements.txt...

7.2AI score
SaveExploits0References1
Rows per page
Query Builder