Lucene search
+L

28 matches found

Positive Technologies
Positive Technologies
added 2025/12/25 12:00 a.m.17 views

PT-2025-53407

Name of the Vulnerable Software and Affected Versions youlaitech youlai-mall versions 1.0.0 through 2.0.0 Description An issue exists in youlaitech youlai-mall that relates to improper access controls. The affected component is the Order Payment Handler, specifically within the...

3.1CVSS6AI score0.00281EPSS
SaveExploits1References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2015-4391

Malware in sbrugna...

5CVSS6.4AI score0.01358EPSS
SaveExploits0References5
OSV
OSV
added 2025/05/25 12:15 a.m.9 views

CVE-2025-5136

A vulnerability, which was classified as problematic, was found in Tmall Demo up to 20250505. This affects an unknown part of the file /tmall/order/pay/ of the component Payment Identifier Handler. The manipulation leads to insufficiently random values. It is possible to initiate the attack...

6.3CVSS4.4AI score0.00565EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/05/25 12:00 a.m.10 views

Tmall_demo 安全特征问题漏洞

Tmalldemo is a Spring Boot-based mini Tmall by the Xianqi Mall projectteam team. A security feature issue vulnerability exists in Tmalldemo 20250505 and earlier versions, which stems from insufficient random values in the file /tmall/order/pay/...

6.3CVSS4.7AI score0.00565EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/05/23 7:22 a.m.20 views

CVE-2024-2382

The Authorize.net Payment Gateway For WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 8.0. This is due to the plugin not properly verifying the authenticity of the request that updates a orders payment status. This makes it possible for...

5.3CVSS6.8AI score0.00206EPSS
SaveExploits0References1
Veracode
Veracode
added 2021/04/14 4:54 a.m.15 views

Insecure Transaction Verification

shopware/core does not perform secure transaction verification. An attacker is able to manipulate the order payment process...

3AI score
SaveExploits0
Hacker One
Hacker One
added 2019/10/03 4:11 a.m.34 views

Razer: [pay.gold.razer.com] Stored XSS - Order payment

The tester discovered that the pay.gold.razer.com site suffered from a Stored XSS issue that could be used to steal a client id and key. The tester worked with team to provide multiple POCs to help them resolve the issue. Razer appreciates all the assistance from corraldev, which was above and...

1.1AI score
SaveExploits0
Cisco Threats
Cisco Threats
added 2014/05/28 4:20 p.m.23 views

Threat Outbreak Alert: Email Messages with Malicious Attachments on May 28, 2014

Medium Alert ID: 34390 First Published: 2014 May 28 16:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain an attachment relating to a purchase order payment for the recipient. The email message attempts to convince the recipient ...

0.3AI score
SaveExploits0
Rows per page
Query Builder