WordPress YITH WooCommerce Gift Cards Premium Plugin <= 3.23.1 is vulnerable to Broken Access Control

Software YITH WooCommerce Gift Cards Premium Type Plugin Vulnerable versions = 3.23.1 Fixed in 3.24.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-44633 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 9a5270f7dbc9 Credits...

$10M Is Yours If You Can Get This Guy to Leave Russia

The U.S. government this week put a $10 million bounty on a Russian man who for the past 18 years operated Try2Check, one of the cybercrime undergrounds most trusted services for checking the validity of stolen credit card data. U.S. authorities say 43-year-old Denis Kulkovs card-checking service...

Malicious code in airbp-cards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85909d85812d972631236bae206926985a3338e536e82a3c983e278f08c4c6c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-85 Malicious code in airbp-cards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85909d85812d972631236bae206926985a3338e536e82a3c983e278f08c4c6c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PartyGovernanceNFT.sol: burn function does not reduce totalVotingPower making it impossible to reach unanimous votes

Lines of code Vulnerability details Impact With the new version of the Party protocol the PartyGovernanceNFT.burn function has been introduced. This function is used to burn party cards. According to the sponsor the initial purpose of this function was to enable the InitialETHCrowdfund contract t...

Ukraine Busts Gang for Massive $4.3 Million Phishing Scams

By Habiba Rashid The Ukrainian Cyber Police carried out 30 searches and managed to seize computer equipment, mobile phones, SIM cards, and other equipment. This is a post from HackRead.com Read the original post: Ukraine Busts Gang for Massive $4.3 Million Phishing Scams...

baseball-trading-cards.com Cross Site Scripting vulnerability OBB-3233477

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-28662

The Gift Cards Gift Vouchers and Packages WordPress Plugin, version = 4.3.1, is affected by an unauthenticated SQL injection vulnerability in the template parameter in the wpgvdoajaxvoucherpdfsavefunc action...

CVE-2023-28662

The Gift Cards Gift Vouchers and Packages WordPress Plugin, version = 4.3.1, is affected by an unauthenticated SQL injection vulnerability in the template parameter in the wpgvdoajaxvoucherpdfsavefunc action...

Sql injection

The Gift Cards Gift Vouchers and Packages WordPress Plugin, version = 4.3.1, is affected by an unauthenticated SQL injection vulnerability in the template parameter in the wpgvdoajaxvoucherpdfsavefunc action...

PT-2023-21884 · WordPress · The Gift Cards (Gift Vouchers/Packages) Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: The Gift Cards Gift Vouchers and Packages WordPress Plugin version = 4.3.1 Description: The issue is an unauthenticated SQL injection vulnerability in the template parameter in the wpgv doajax voucher pdf save func action. Recommendations: Fo...

WordPress Plugin Gift Cards SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2023-28662

The Gift Cards Gift Vouchers and Packages WordPress Plugin, version = 4.3.1, is affected by an unauthenticated SQL injection vulnerability in the template parameter in the wpgvdoajaxvoucherpdfsavefunc action...

CVE-2023-28662

The CVE-2023-28662 entry concerns the WordPress Gift Cards (Gift Vouchers and Packages) plugin, affected versions 4.3.1 and earlier. The vulnerability is an unauthenticated SQL injection in the template parameter of the wpgv_doajax_voucher_pdf_save_func action, enabling arbitrary data access via ...

CVE-2023-28662

The Gift Cards Gift Vouchers and Packages WordPress Plugin, version = 4.3.1, is affected by an unauthenticated SQL injection vulnerability in the template parameter in the wpgvdoajaxvoucherpdfsavefunc action...

DataSurgeon - Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Secuirty Numbers And More From Text

DataSurgeon ds is a versatile tool designed for incident response, penetration testing, and CTF challenges. It allows for the extraction of various types of sensitive information including emails, phone numbers, hashes, credit cards, URLs, IP addresses, MAC addresses, SRV DNS records and a lot...

Artesãos SEOTools 输入验证错误漏洞

SEOTools is an Artesãos open source SEO tool for Laravel and Lumen. Artesãos SEOTools prior to version 0.17.2 has an input validation error vulnerability that stems from a problem with the function eachValue in the file TwitterCards.php, where manipulation of the parameter value results in an ope...

CVE-2022-40633

A malicious actor can clone access cards used to open control cabinets secured with Rittal CMC III locks...

Design/Logic Flaw

A malicious actor can clone access cards used to open control cabinets secured with Rittal CMC III locks...

CVE-2022-40633

CVE-2022-40633 affects Rittal CMC III control cabinet locks. The root issue is Improper Access Control, enabling a malicious actor to clone access cards to open cabinets. Public sources describe the impact as unauthorized physical access to secured cabinets, with CVSSv3 base metrics (AV: Physical...