2712 matches found
Booster for WooCommerce - Checkout Files Deletion via CSRF
The plugins do not have CSRF check in place when deleting files uploaded at the checkout, allowing attackers to make a logged in shop manager or admin delete them via a CSRF attack Requirements: - Enable the "Checkout File Upload" module of the plugin...
CVE-2022-39878
Improper access control vulnerability in Samsung Checkout prior to version 5.0.55.3 allows attackers to access sensitive information via implicit intent broadcast...
CVE-2022-39878
Improper access control vulnerability in Samsung Checkout prior to version 5.0.55.3 allows attackers to access sensitive information via implicit intent broadcast...
CVE-2022-39878
Improper access control vulnerability in Samsung Checkout prior to version 5.0.55.3 allows attackers to access sensitive information via implicit intent broadcast...
Improper access control
Improper access control vulnerability in Samsung Checkout prior to version 5.0.55.3 allows attackers to access sensitive information via implicit intent broadcast...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices version 5.0.55.3, which stems from an improper access control vulnerability in Samsung...
CVE-2022-39878
Improper access control vulnerability in Samsung Checkout prior to version 5.0.55.3 allows attackers to access sensitive information via implicit intent broadcast...
PT-2022-25070 · Samsung · Samsung Checkout
Name of the Vulnerable Software and Affected Versions: Samsung Checkout versions prior to 5.0.55.3 Description: The issue is related to improper access control, allowing attackers to access sensitive information. This is achieved via implicit intent broadcast. Recommendations: For versions prior ...
CVE-2022-39878: Improper Access Control
Improper access control vulnerability in Samsung Checkout prior to version 5.0.55.3 allows attackers to access sensitive information via implicit intent broadcast...
CVE-2022-39878
The CVE-2022-39878 entry affects Samsung Checkout prior to version 5.0.55.3. Affected software/component: Samsung Checkout (Android app). Root cause: improper access control allowing implicit intent broadcasts to expose sensitive information. Impact: potential disclosure of sensitive data to othe...
Joomla Solidres 2.12.9 Cross Site Scripting
┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...
CVE-2022-36839
SQL injection vulnerability via IAPService in Samsung Checkout prior to version 5.0.53.1 allows attackers to access IAP information...
CVE-2022-36839
SQL injection vulnerability via IAPService in Samsung Checkout prior to version 5.0.53.1 allows attackers to access IAP information...
CVE-2022-36839
SQL injection vulnerability via IAPService in Samsung Checkout prior to version 5.0.53.1 allows attackers to access IAP information...
Sql injection
SQL injection vulnerability via IAPService in Samsung Checkout prior to version 5.0.53.1 allows attackers to access IAP information...
CVE-2022-36839
SQL injection vulnerability via IAPService in Samsung Checkout prior to version 5.0.53.1 allows attackers to access IAP information...
CVE-2022-36839
CVE-2022-36839 affects Samsung Checkout’s IAPService, with a SQL injection on IAP information exposure. Affected releases are prior to version 5.0.53.1; upgrading to 5.0.53.1 or later is the indicated remediation. The root cause is an SQL injection vulnerability in the IAPService, enabling access...
Supersmart 安全漏洞
Supersmart is an artificially intelligent automated checkout for brick-and-mortar retail from Israel's Supersmart. Supersmart Walk suffers from a security vulnerability that stems from the presence of unauthorized actions performed on other customers, which can be exploited by an attacker to rese...
PT-2022-23643 · Samsung · Samsung Checkout
Name of the Vulnerable Software and Affected Versions: Samsung Checkout versions prior to 5.0.53.1 Description: The issue allows attackers to access IAP information via SQL injection vulnerability in the IAPService of Samsung Checkout. Recommendations: For versions prior to 5.0.53.1, update to...
SAMSUNG Checkout SQL注入漏洞
SAMSUNG Checkout is a checkout system from Samsung South Korea. A security vulnerability exists in SAMSUNG Checkout versions prior to 5.0.53.1, which stems from an SQL injection vulnerability in IAPService that can be exploited by an attacker to access IAP information...