CVE-2026-65760 Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1

Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1 - Improper access checks allow logged in users to retreive order and customer information of any order in the system...

Information disclosure

A vulnerability in the UPC bar code of the Avanti Markets MarketCard could allow an unauthenticated, local attacker to access funds within the customer's MarketCard balance, and also could lead to Customer Information Disclosure. The vulnerability is due to lack of proper validation of the UPC ba...

CVE-2018-12076

A vulnerability in the UPC bar code of the Avanti Markets MarketCard could allow an unauthenticated, local attacker to access funds within the customer's MarketCard balance, and also could lead to Customer Information Disclosure. The vulnerability is due to lack of proper validation of the UPC ba...

CVE-2018-10198

CVE-2018-10198 affects OTRS 6.0.x before 6.0.7. An attacker authenticated as a customer can use the ticket overview screen to disclose internal article information from their own customer tickets, constituting an information disclosure vulnerability. The issue is described as an information discl...

LocalTapiola: Possibly big authorization problem in Lähitapiola´s varainhoito

Issue The reporter found a design flaw in a feature where pdf-reports are generated. Pdf-reports were generated using 19-digit random names and the names as well as the reports were persistent and accessible by all authenticated users. Fix Guessing a random 19-digit name was found to be almost...

White hat hackers: part of the banks risk enterprise network platform to determine the memory vulnerability-vulnerability warning-the black bar safety net

The insurance company through the website and other online sales channels to sell insurance really“insurance”? Recently, a large listed life insurance companies were again exposed a“provincial system loopholes, leaks millions of customer information.” In fact, the securities daily on zqrbbaoxian...