Lucene search
+L

1498 matches found

Cvelist
Cvelist
•added 2025/10/17 12:00 a.m.•27 views

CVE-2025-62649

The Restaurant Brands International RBI assistant platform through 2025-09-06 relies on client-side authentication for submission of equipment orders...

5.8CVSS0.00513EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/10/17 12:00 a.m.•43 views

Restaurant Brands International assistant platform 安全漏洞

Restaurant Brands International assistant platform is a restaurant back office platform from Restaurant Brands International. A security vulnerability exists in the Restaurant Brands International assistant platform version 2025-09-06 and earlier, which stems from a dependency on client...

5.8CVSS5.8AI score0.00513EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/15 8:26 a.m.•11 views

EUVD-2025-34540

The Oceanpayment CreditCard Gateway plugin for WordPress is vulnerable to unauthenticated and unauthorized modification of data due to missing authentication and capability checks on the 'returnpayment' and 'noticepayment' functions in all versions up to, and including, 6.0. This makes it possibl...

5.3CVSS5.8AI score0.00336EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/10/15 8:26 a.m.•26 views

CVE-2025-11728 Oceanpayment CreditCard Gateway <= 6.0 - Missing Authentication to Unauthenticated Order Status Update

The Oceanpayment CreditCard Gateway plugin for WordPress is vulnerable to unauthenticated and unauthorized modification of data due to missing authentication and capability checks on the 'returnpayment' and 'noticepayment' functions in all versions up to, and including, 6.0. This makes it possibl...

5.3CVSS0.00336EPSS
SaveExploits0References3
CVE
CVE
•added 2025/10/15 8:26 a.m.•31 views

CVE-2025-11728

CVE-2025-11728 affects the Oceanpayment CreditCard Gateway plugin for WordPress (versions up to 6.0). The root cause is missing authentication and capability checks in the return_payment and notice_payment functions, allowing unauthenticated and unauthorized modification of data. The practical im...

5.3CVSS5.8AI score0.00336EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/15 12:00 a.m.•3 views

CVE-2025-11728: Missing Authentication for Critical Function

The Oceanpayment CreditCard Gateway plugin for WordPress is vulnerable to unauthenticated and unauthorized modification of data due to missing authentication and capability checks on the 'returnpayment' and 'noticepayment' functions in all versions up to, and including, 6.0. This makes it possibl...

5.3CVSS5.8AI score0.00336EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/13 5:29 a.m.•14 views

CVE-2025-11604

A vulnerability was determined in projectworlds Online Ordering Food System 1.0. This issue affects some unknown processing of the file /all-orders.php. This manipulation of the argument Status causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

9.8CVSS7AI score0.00421EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/11 3:33 p.m.•12 views

EUVD-2025-33866

A vulnerability was determined in projectworlds Online Ordering Food System 1.0. This issue affects some unknown processing of the file /all-orders.php. This manipulation of the argument Status causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

7.5CVSS6.5AI score0.00421EPSS
SaveExploits1References5
OSV
OSV
•added 2025/10/11 2:15 p.m.•12 views

CVE-2025-11604

A vulnerability was determined in projectworlds Online Ordering Food System 1.0. This issue affects some unknown processing of the file /all-orders.php. This manipulation of the argument Status causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

9.8CVSS5.7AI score0.00421EPSS
SaveExploits1References4
NVD
NVD
•added 2025/10/11 2:15 p.m.•15 views

CVE-2025-11604

A vulnerability was determined in projectworlds Online Ordering Food System 1.0. This issue affects some unknown processing of the file /all-orders.php. This manipulation of the argument Status causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

9.8CVSS0.00421EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/10/11 2:02 p.m.•6 views

CVE-2025-11604 projectworlds Online Ordering Food System all-orders.php sql injection

A vulnerability was determined in projectworlds Online Ordering Food System 1.0. This issue affects some unknown processing of the file /all-orders.php. This manipulation of the argument Status causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

7.5CVSS6.9AI score0.00421EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/10/11 2:02 p.m.•28 views

CVE-2025-11604 projectworlds Online Ordering Food System all-orders.php sql injection

A vulnerability was determined in projectworlds Online Ordering Food System 1.0. This issue affects some unknown processing of the file /all-orders.php. This manipulation of the argument Status causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

7.5CVSS0.00421EPSS
SaveExploits1References4
CVE
CVE
•added 2025/10/11 2:02 p.m.•32 views

CVE-2025-11604

CVE-2025-11604 affects ProjectWorlds Online Ordering Food System 1.0. The vulnerability arises from improper handling of the Status parameter in /all-orders.php, allowing an SQL injection via remote exploitation. Public exploit disclosed. Multiple sources (NVD, Red Hat, EUVD, CNNVD, CVE listing) ...

9.8CVSS6.9AI score0.00421EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2025/10/11 12:00 a.m.•14 views

Projectworlds Online Ordering Food System SQL注入漏洞

Projectworlds Online Ordering Food System is an online ordering food system from Projectworlds. A SQL injection vulnerability exists in Projectworlds Online Ordering Food System version 1.0, which stems from an incorrect manipulation of the parameter Status in the file /all-orders.php, which coul...

9.8CVSS7.8AI score0.00421EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/10/11 12:00 a.m.•15 views

PT-2025-41690

Name of the Vulnerable Software and Affected Versions ProjectWorlds Online Ordering Food System version 1.0 Description A SQL injection issue exists due to improper processing of the Status argument in the /all-orders.php file. Remote exploitation is possible. The exploit has been publicly...

9.8CVSS7AI score0.00421EPSS
SaveExploits1References11
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2017-10368

Malware in sbrugna...

6CVSS5.5AI score0.00802EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2009-4091

Malware in sbrugna...

6.8CVSS6.4AI score0.00999EPSS
SaveExploits3References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2020-11719

Malware in sbrugna...

8.8CVSS7.8AI score0.00887EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2021-11974

Malware in sbrugna...

6.1CVSS6.3AI score0.00887EPSS
SaveExploits2References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2021-11914

Malware in sbrugna...

7.5CVSS7.5AI score0.01521EPSS
SaveExploits2References2
Rows per page
Query Builder