21491 matches found
Malicious code in esqcandygrandtool (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 222256ef5c60e3159b7d897ee439e83107c2682ea04952c463fe8d13f8a23df8 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
CVE-2023-0998
A vulnerability classified as critical has been found in SourceCodester Alphaware Simple E-Commerce System 1.0. This affects an unknown part of the file /alphaware/summary.php of the component Payment Handler. The manipulation of the argument amount leads to improper access controls. It is possib...
CVE-2023-0998
A vulnerability classified as critical has been found in SourceCodester Alphaware Simple E-Commerce System 1.0. This affects an unknown part of the file /alphaware/summary.php of the component Payment Handler. The manipulation of the argument amount leads to improper access controls. It is possib...
CVE-2023-0997
A vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Moosikay/order.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection...
CVE-2023-0997
A vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Moosikay/order.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection...
Sql injection
A vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Moosikay/order.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection...
Improper access control
A vulnerability classified as critical has been found in SourceCodester Alphaware Simple E-Commerce System 1.0. This affects an unknown part of the file /alphaware/summary.php of the component Payment Handler. The manipulation of the argument amount leads to improper access controls. It is possib...
CVE-2023-0998
CVE-2023-0998 affects SourceCodester Alphaware Simple E-Commerce System 1.0, specifically the Payment Handler component in /alphaware/summary.php. The root cause is manipulation of the amount argument leading to improper access controls, allowing remote abuse. Exploitation has been disclosed publ...
CVE-2023-0998 SourceCodester Alphaware Simple E-Commerce System Payment summary.php access control
A vulnerability classified as critical has been found in SourceCodester Alphaware Simple E-Commerce System 1.0. This affects an unknown part of the file /alphaware/summary.php of the component Payment Handler. The manipulation of the argument amount leads to improper access controls. It is possib...
CVE-2023-0997 SourceCodester Moosikay E-Commerce System POST Parameter order.php sql injection
A vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Moosikay/order.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection...
CVE-2023-0997
CVE-2023-0997 affects SourceCodester Moosikay E-Commerce System 1.0. The vulnerability is in the POST Parameter Handler’s /Moosikay/order.php file, where manipulation of the username parameter leads to SQL injection. The issue can be exploited remotely, and public disclosures exist. Multiple conn...
Alphaware Simple E-Commerce System 访问控制错误漏洞
Alphaware Simple E-Commerce System is an e-commerce system by razormist individual developers. An Access Control Error vulnerability exists in SourceCodester Alphaware Simple E-Commerce System version 1.0, which stems from incorrect manipulation of the parameter amount resulting in incorrect acce...
Moosikay E-Commerce System SQL注入漏洞
Moosikay E-Commerce System is an e-commerce system by the individual developer Arvin Arandilla. A SQL injection vulnerability exists in SourceCodester Moosikay E-Commerce System version 1.0, which stems from an incorrect manipulation of the username parameter resulting in sql injection...
e-kozmetika.si Cross Site Scripting vulnerability OBB-3205583
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
e-zatepleni.cz Cross Site Scripting vulnerability OBB-3203521
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
e-award.com.au Cross Site Scripting vulnerability OBB-3201370
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
What is the tokenization process and why it is so important?
By Owais Sultan A large number of e-commerce payment platforms use effective payment gateway tools and effectively integrate them with an… This is a post from HackRead.com Read the original post: What is the tokenization process and why it is so important?...
Intel Processors 输入验证错误漏洞
Intel Processors are U.S. Intel Corporation's provide for interpreting computer instructions and processing data in computer software. A security vulnerability exists in the IntelR Processors BIOS firmware that originates from an incorrect input validation contained in the firmware, which can be...
