408 matches found
PT-2026-5069
The Buy Now Plus – Buy Now buttons for Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'buynowplus' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on shortcode attributes. This makes it possible for...
WordPress Plugin: Buy Now Plus – Cross-Site Script Vulnerabilities
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
CVE-2023-25030
Missing Authorization vulnerability in Buy Me a Coffee.This issue affects Buy Me a Coffee: from n/a through 3.7...
Is Your Android TV Streaming Box Part of a Botnet?
On the surface, the Superbox media streaming devices for sale at retailers like BestBuy and Walmart may seem like a steal: They offer unlimited access to more than 2,200 pay-per-view and streaming services like Netflix , ESPN and Hulu , all for a one-time fee of around $400. But security experts...
MAL-2025-173015 Malicious code in anita-buy-mag (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b599342ad2a8e3c2e550e77f14685e0a1e5a9ee423f41378cae33c17dab394d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-143288
Malicious code in anita-buy-mag npm...
EUVD-2025-142519
Malicious code in butry-yust-buy npm...
Malicious code in internal-native-buy (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-48500 Malicious code in internal-native-buy (npm)
The package communicates with a domain associated with malicious activity...
CVE-2025-11486
A vulnerability was identified in SourceCodester Farm Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /buyNow.php. Such manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploit is publicly available an...
CVE-2025-11486 SourceCodester Farm Management System buyNow.php sql injection
A vulnerability was identified in SourceCodester Farm Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /buyNow.php. Such manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploit is publicly available an...
CVE-2025-11486
CVE-2025-11486 affects SourceCodester Farm Management System 1.0. The vulnerability is in the /buyNow.php file, where manipulation of the Name parameter enables a SQL injection. It is described as remotely exploitable, with a publicly available exploit. The Red Hat/NVD/CVE records and related fee...
EUVD-2014-5522
Malware in sbrugna...
EUVD-2014-5644
Malware in sbrugna...
EUVD-2007-1425
Malware in sbrugna...
EUVD-2014-5464
Malware in sbrugna...
EUVD-2014-5623
Malware in sbrugna...
EUVD-2009-3337
Malware in sbrugna...