InfoSec-Black-Friday

InfoSec Black Friday & Cyber Monday Deals "InfoSec Cares" 2025 Edition All the deals for InfoSec related software/tools this coming Black Friday and Cyber Monday. ALL LINKS UPDATED FOR 2025! Many more incoming... Quick Personal Update After being involved in a car accident and everything going...

WordPress Pricing Deals for WooCommerce <=2.0.2.02 - SQL Injection

WordPress Pricing Deals for WooCommerce plugin through 2.0.2.02 contains a SQL injection vulnerability. The plugin does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action. An attacker can possibly obtain sensitive information, modify data, and/or...

CVE-2026-110629

VentureDrake Laravel CRM versions prior to 2.4.0 are vulnerable to a missing authorization flaw. This vulnerability allows authenticated users to bypass Spatie role permissions by leveraging Livewire action methods . Specifically, read-only users can execute unauthorized actions such as delete, w...

VulnCheck KEV: CVE-2022-1057

The Pricing Deals for WooCommerce WordPress plugin through 2.0.2.02 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection...

Malicious code in deals-light-ui (npm)

The package deals-light-ui was found to contain malicious code. --- Credit: OpenSSF source...

EUVD-2026-54191

An issue in the billing and license activation subsystem allows remote attackers to bypass payment authorization workflows. By exploiting insufficient cryptographic validation or lack of server-side state verification on promotional/lifetime-deal LTD redemption codes, an unauthenticated attacker...

WordPress WP Coupons and Deals – Coupon Plugin For Affiliate Marketers plugin <= 3.2.2 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin WP Coupons and Deals versions = 3.2.2...

hangover-ctf-wolfpack-deals

🎰 The Hangover CTF — Machine 1: Wolfpack Deals "What happe...

Founder Liquidity Without Compromising on Growth

Founders can access liquidity without exiting by selling shares via secondary deals, reducing financial pressure while staying focused on long-term growth...

The March Madness scam playbook

March Madness is the annual men's and women's NCAA Division I basketball tournament, where 68 teams play in a single-elimination bracket for the US national championship. But March Madness doesn’t just bring buzzer beaters and busted brackets. It also kicks off a short, intense season for scammer...

CVE-2019-25531 Netartmedia Deals Portal Lastest SQL Injection via loginaction.php

Netartmedia Deals Portal contains an SQL injection vulnerability in the Email parameter of loginaction.php that allows unauthenticated attackers to manipulate database queries. Attackers can submit crafted SQL payloads through POST requests to extract sensitive information or bypass authenticatio...

CVE-2019-25531

Netartmedia Deals Portal is affected by an SQL injection in the Email parameter of loginaction.php, allowing unauthenticated attackers to manipulate queries and potentially extract data or bypass authentication. The vulnerability is rated HIGH (CVSS 3.1: 8.2, NETWORK/LOW/PR:N/UI:N, with confident...

Netartmedia Deals Portal SQL Injection Vulnerability

Netartmedia Deals Portal is a discount trading website system operated by the Bulgarian company Netartmedia. The Netartmedia Deals Portal has a SQL injection vulnerability, which stems from SQL injection attacks in email parameters. This vulnerability could allow unverified attackers to manipulat...

PT-2026-24991

Netartmedia Deals Portal contains an SQL injection vulnerability in the Email parameter of loginaction.php that allows unauthenticated attackers to manipulate database queries. Attackers can submit crafted SQL payloads through POST requests to extract sensitive information or bypass authenticatio...

CVE-2019-25531: Improper Neutralization of Special Elements used in an SQL Command

Netartmedia Deals Portal contains an SQL injection vulnerability in the Email parameter of loginaction.php that allows unauthenticated attackers to manipulate database queries. Attackers can submit crafted SQL payloads through POST requests to extract sensitive information or bypass authenticatio...

CVE-2025-64241

Missing Authorization vulnerability in Imtiaz Rayhan WP Coupons and Deals wp-coupons-and-deals allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Coupons and Deals: from n/a through = 3.2.4...

EUVD-2025-203609

Missing Authorization vulnerability in Imtiaz Rayhan WP Coupons and Deals wp-coupons-and-deals allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Coupons and Deals: from n/a through = 3.2.4...

CVE-2025-64241

Missing Authorization vulnerability in Imtiaz Rayhan WP Coupons and Deals wp-coupons-and-deals allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Coupons and Deals: from n/a through = 3.2.4...

CVE-2025-64241 WordPress WP Coupons and Deals plugin <= 3.2.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Imtiaz Rayhan WP Coupons and Deals wp-coupons-and-deals allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Coupons and Deals: from n/a through = 3.2.4...

CVE-2025-64241

CVE-2025-64241 is a Missing Authorization vulnerability in the WP Coupons and Deals plugin for WordPress, affecting versions up to 3.2.4. The issue stems from incorrectly configured access control, enabling unauthorized actions. CVSS v3.1 base score is 4.3 (Medium). Remediation: update the plugin...