27 matches found
Craft Commerce has an unauthenticated information disclosure that can leak some customer order data on anonymous payments
Summary PaymentsController::actionPay discloses some order data to unauthenticated users when an order number is provided and the email check fails during an anonymous payment. The JSON error response includes the serialized order object order, which contains some sensitive fields such as custome...
PT-2026-6301
Name of the Vulnerable Software and Affected Versions CI4MS versions prior to 0.28.5.0 Description CI4MS, a CodeIgniter 4-based CMS skeleton, contains a flaw in its authentication implementation that allows an unauthenticated attacker to determine if an email address is registered within the...
EUVD-2019-9403
Malware in sbrugna...
EUVD-2005-0494
Malware in sbrugna...
EUVD-2024-32494
Malicious code in bioql PyPI...
EUVD-2023-2704
Malicious code in bioql PyPI...
CVE-2024-57542
Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via the field idemailcheckbtn...
Linksys E8450 操作系统命令注入漏洞
The Linksys E8450 is a router from Linksys USA. A command injection vulnerability exists in the Linksys E8450 v1.2.00.360516, which stems from idemailcheckbtn failing to correctly filter constructed command special characters, commands, and more. An attacker can exploit this vulnerability to caus...
GLPI 信息泄露漏洞
GLPI is an open source IT and asset management software from GLPI Open Source. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...
WordPress Plugin WP EXtra Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
node-js-1408 (=1.0.0), node-js-1409 (=1.0.0) potentially affected by CVE-2023-39619 via node-email-check (=1.0.4)
node-email-check NPM version =1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on node-email-check and may be impacted: - node-js-1408 =1.0.0 - node-js-1409 =1.0.0 Source cves: CVE-2023-39619 Source advisory: OSV:GHSA-9242-6P36-6256...
GHSA-9242-6P36-6256 Inefficient Regular Expression Complexity in node-email-check
ReDos in NPMJS Node Email Check v.1.0.4 allows an attacker to cause a denial of service via a crafted string to the scpSyntax component...
Inefficient Regular Expression Complexity in node-email-check
ReDos in NPMJS Node Email Check v.1.0.4 allows an attacker to cause a denial of service via a crafted string to the scpSyntax component...
CVE-2023-39619
ReDos in NPMJS Node Email Check v.1.0.4 allows an attacker to cause a denial of service via a crafted string to the scpSyntax component...
CVE-2023-39619
ReDos in NPMJS Node Email Check v.1.0.4 allows an attacker to cause a denial of service via a crafted string to the scpSyntax component...
CVE-2023-39619
ReDos in NPMJS Node Email Check v.1.0.4 allows an attacker to cause a denial of service via a crafted string to the scpSyntax component...
Code injection
ReDos in NPMJS Node Email Check v.1.0.4 allows an attacker to cause a denial of service via a crafted string to the scpSyntax component...
node-email-check Security Vulnerabilities
node-email-check is a NodeJS email validator, checker and MX checker from the individual developer Teoman Tuncer. A security vulnerability exists in node-email-check version v.1.0.4, which originated from a vulnerability that allows an attacker to cause a denial of service via a crafted string to...
PT-2023-27037 · Npmjs · Node Email Check
Name of the Vulnerable Software and Affected Versions: NPMJS Node Email Check version 1.0.4 Description: The issue allows an attacker to cause a denial of service via a crafted string to the scpSyntax component. This can be exploited by sending a specifically designed string, leading to a denial ...
CVE-2023-39619
Summary: CVE-2023-39619 affects the Node Email Check package on NPM. The issue is a ReDoS vulnerability in the scpSyntax component of node-email-check version 1.0.4, allowing an attacker to cause denial of service through a crafted string. The available connected sources corroborate this descript...