Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 10:23 a.m.3 views

CVE-2024-36438

eLinkSmart Hidden Smart Cabinet Lock 2024-05-22 has Incorrect Access Control and fails to perform an authorization check which can lead to card duplication and other attacks...

7.3CVSS7AI score0.00027EPSS
Exploits0References1
CVE
CVE
added 2025/04/16 12:0 a.m.54 views

CVE-2024-58248

CVE-2024-58248 affects nopCommerce prior to 4.80.0 (public notes reference up to 4.90.1) where order placement lacks locking, enabling a race condition that can allow duplicate gift card redemption. Public advisories (NVD/Red Hat/OSV/Snyk) confirm the issue and cite a remediation to upgrade to ve...

3.5CVSS8.9AI score0.00267EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2025/04/16 12:0 a.m.10 views

CVE-2024-58248

nopCommerce through 4.90.1 does not offer locking for order placement. Thus there is a race condition with duplicate redeeming of gift cards...

3.5CVSS0.00267EPSS
Exploits1References3
NVD
NVD
added 2024/07/15 7:15 p.m.10 views

CVE-2024-36438

eLinkSmart Hidden Smart Cabinet Lock 2024-05-22 has Incorrect Access Control and fails to perform an authorization check which can lead to card duplication and other attacks...

7.3CVSS0.00027EPSS
Exploits0References2
CVE
CVE
added 2024/07/15 12:0 a.m.40 views

CVE-2024-36438

CVE-2024-36438 affects the eLinkSmart Hidden Smart Cabinet Lock. The connected sources confirm an incorrect access control/authorization check vulnerability in the device, which can enable card duplication and related attacks. No concrete patch/version or remediation is provided in the documents;...

7.3CVSS6.7AI score0.00027EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/07/15 12:0 a.m.12 views

CVE-2024-36438

eLinkSmart Hidden Smart Cabinet Lock 2024-05-22 has Incorrect Access Control and fails to perform an authorization check which can lead to card duplication and other attacks...

0.00027EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/07/15 12:0 a.m.12 views

CVE-2024-36438

eLinkSmart Hidden Smart Cabinet Lock 2024-05-22 has Incorrect Access Control and fails to perform an authorization check which can lead to card duplication and other attacks...

7AI score0.00027EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/07/15 12:0 a.m.2 views

PT-2024-26997 · Elinksmart · Elinksmart Hidden Smart Cabinet Lock

Name of the Vulnerable Software and Affected Versions: eLinkSmart Hidden Smart Cabinet Lock affected versions not specified Description: The issue is related to incorrect access control, where the system fails to perform an authorization check. This can lead to card duplication and other attacks...

7.3CVSS6.8AI score0.00027EPSS
Exploits0References5
ThreatPost
ThreatPost
added 2016/08/03 10:29 p.m.9 views

Researchers Bypass Chip and Pin Protections at Black Hat

LAS VEGAS – Credit card companies for the most part have moved away from “swipe and signature” credit cards to chip and pin cards by this point; the technology known as EMV Europay, MasterCard, and Visa which is supposed to provide consumers with an added layer of security is beginning to see som...

0.9AI score
Exploits0
Rows per page
Query Builder