buy-and-sell-car-secrets.com Cross Site Scripting vulnerability OBB-3855008

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

buy-lcd.com Cross Site Scripting vulnerability OBB-3848072

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the “Ask to Buy” function in operating systems such as macOS, iOS, and iPadOS allows a hacker to disclose protected information.

The vulnerability of the “Ask to Buy” function in operating systems such as macOS, iOS, and iPadOS is related to lack of access control. Exploiting this vulnerability can allow a hacker to disclose protected information...

CVE-2023-50027

SQL Injection vulnerability in Buy Addons baproductzoommagnifier module for PrestaShop versions 1.0.16 and before, allows remote attackers to escalate privileges and gain sensitive information via BaproductzoommagnifierZoomModuleFrontController::run method...

Sql injection

SQL Injection vulnerability in Buy Addons baproductzoommagnifier module for PrestaShop versions 1.0.16 and before, allows remote attackers to escalate privileges and gain sensitive information via BaproductzoommagnifierZoomModuleFrontController::run method...

CVE-2023-50027

The CVE-2023-50027 issue affects PrestaShop Buy Addons baproductzoommagnifier module (versions 1.0.16 and earlier). The root cause is a SQL injection in BaproductzoommagnifierZoomModuleFrontController::run(), which the documented impact states can lead to remote privilege escalation and exposure ...

CVE-2023-50027

SQL Injection vulnerability in Buy Addons baproductzoommagnifier module for PrestaShop versions 1.0.16 and before, allows remote attackers to escalate privileges and gain sensitive information via BaproductzoommagnifierZoomModuleFrontController::run method...

CVE-2023-48925

SQL injection vulnerability in Buy Addons bavideotab before version 1.0.6, allows attackers to escalate privileges and obtain sensitive information via the component BaVideoTabSaveVideoModuleFrontController::run...

CVE-2023-48925

SQL injection vulnerability in Buy Addons bavideotab before version 1.0.6, allows attackers to escalate privileges and obtain sensitive information via the component BaVideoTabSaveVideoModuleFrontController::run...

Sql injection

SQL injection vulnerability in Buy Addons bavideotab before version 1.0.6, allows attackers to escalate privileges and obtain sensitive information via the component BaVideoTabSaveVideoModuleFrontController::run...

PT-2023-31010 · Unknown · Buy Addons Bavideotab

Name of the Vulnerable Software and Affected Versions: Buy Addons bavideotab versions prior to 1.0.6 Description: The issue allows attackers to escalate privileges and obtain sensitive information via the component BaVideoTabSaveVideoModuleFrontController::run. Recommendations: For versions prior...

CVE-2023-48925

The CVE-2023-48925 entry concerns a SQL injection in Buy Addons bavideotab (PrestaShop addon) before version 1.0.6, exploitable via BaVideoTabSaveVideoModuleFrontController::run(). The vulnerability can escalate privileges and disclose sensitive information. Affected version: prior to 1.0.6. Reme...

CVE-2023-48925

SQL injection vulnerability in Buy Addons bavideotab before version 1.0.6, allows attackers to escalate privileges and obtain sensitive information via the component BaVideoTabSaveVideoModuleFrontController::run...

Creator can earn holder fee

Lines of code Vulnerability details Impact Creator can earn creator and holder as well. Proof of Concept In market.sol contract there is a buy function which cannot be used by creator of share. requireshareDataid.creator != msg.sender, "Creator cannot buy"; However, it's still possible for creato...

Sandwich attack on buy()

Lines of code Vulnerability details Impact Function Market:buy does not check or take in a minimum buy amount. This makes users' funds vulnerable to sandwich attacks. buy will increase shareDataid.tokenCount, and thus change the exchange rate of share price. price, fee =...

CVE-2023-47657

Auth. ShopManager+ Stored Cross-Site Scripting XSS vulnerability in GrandPlugins Direct Checkout – Quick View – Buy Now For WooCommerce plugin = 1.5.8 versions...

WordPress Plugin Direct Checkout - Quick View - Buy Now For WooCommerce Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. WordPress Plugin Direct Checkout -...

CVE-2023-47657

CVE-2023-47657 affects GrandPlugins Direct Checkout – Quick View – Buy Now For WooCommerce plugin up to version 1.5.8. It is a Stored XSS vulnerability exploitable by an authenticated user with Shop Manager+ privileges. Patch status: fixed in 1.5.9 (per Patchstack); NVD lists CVSSv3.1 base 4.8 (m...

PT-2023-9164 · Unknown +1 · Prestashop +1

Name of the Vulnerable Software and Affected Versions: PrestaShop Buy Addons baproductzoommagnifier module versions 1.0.16 and before Description: The issue is related to a lack of protection against SQL structure attacks in the BaproductzoommagnifierZoomModuleFrontController::run method of the...

About the security content of macOS Ventura 13.6

About the security content of macOS Ventura 13.6 This document describes the security content of macOS Ventura 13.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...