1026 matches found
CVE-2025-10287
CVE-2025-10287 affects roncoo-pay (file /auth/orderQuery). The vulnerability arises from manipulating the orderNo parameter in an unknown function, enabling a direct request attack. Exploitation can be performed remotely with high complexity and low access requirements; published proof-of-concept...
CVE-2025-10287 roncoo roncoo-pay orderQuery direct request
A vulnerability has been found in roncoo roncoo-pay up to 9428382af21cd5568319eae7429b7e1d0332ff40. The affected element is an unknown function of the file /auth/orderQuery. Such manipulation of the argument orderNo leads to direct request. The attack may be performed from remote. A high complexi...
roncoo-pay 安全漏洞
roncoo-pay roncoo payment system is an open source Internet payment system by Lead Class Network RonCoo. A security vulnerability exists in roncoo-pay, which stems from improper authentication in the file /user/info/list and could lead to a remote attack...
roncoo-pay 安全漏洞
roncoo-pay roncoo payment system is an Internet payment system open-sourced by Lead Class Network RonCoo. A security vulnerability exists in roncoo-pay, which stems from a misuse of the parameter orderNo in the file /auth/orderQuery, which could lead to a direct request attack...
PT-2025-37285
Name of the Vulnerable Software and Affected Versions: roncoo-pay versions prior to 9428382af21cd5568319eae7429b7e1d0332ff40 Description: A vulnerability exists in roncoo-pay that allows for direct request manipulation. The issue is related to the /auth/orderQuery file and an unknown function...
PT-2025-37287
Name of the Vulnerable Software and Affected Versions: roncoo-pay affected versions not specified Description: A vulnerability exists in roncoo-pay that allows for improper authentication. The issue is related to manipulation of an unknown function within the /user/info/list file. This allows for...
CVE-2025-58616
Missing Authorization vulnerability in Frisbii Frisbii Pay reepay-checkout-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frisbii Pay: from n/a through = 1.8.2.1...
CVE-2025-9836
A vulnerability was found in macrozheng mall up to 1.0.3. This vulnerability affects the function paySuccess of the file /order/paySuccess. The manipulation of the argument orderId results in authorization bypass. The attack can be launched remotely. The exploit has been made public and could be...
CVE-2025-58616
Missing Authorization vulnerability in Frisbii Frisbii Pay reepay-checkout-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frisbii Pay: from n/a through = 1.8.2.1...
WordPress Frisbii Pay Plugin <= 1.8.2.1 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Denver Jackson in WordPress Plugin Frisbii Pay versions = 1.8.2.1...
CVE-2025-58616 WordPress Frisbii Pay Plugin <= 1.8.2.1 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Frisbii Frisbii Pay reepay-checkout-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frisbii Pay: from n/a through = 1.8.2.1...
CVE-2025-58616 WordPress Frisbii Pay Plugin <= 1.8.2.1 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Frisbii Frisbii Pay reepay-checkout-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frisbii Pay: from n/a through = 1.8.2.1...
CVE-2025-58616
CVE-2025-58616 concerns the WordPress Frisbii Pay plugin (versions up to 1.8.2.1) with a Missing Authorization / Broken Access Control vulnerability. The issue arises from incorrectly configured access control, enabling unauthorized actions. CVSS v3.1 base score 6.5 (Network, Low attack complexit...
PT-2025-35750
Name of the Vulnerable Software and Affected Versions: Frisbii Pay versions through 1.8.2.1 Description: A missing authorization issue exists in Frisbii Pay, allowing exploitation due to incorrectly configured access control security levels. Recommendations: At the moment, there is no information...
WordPress plugin Frisbii Pay 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...
CVE-2025-9836 macrozheng mall paySuccess authorization
A vulnerability was found in macrozheng mall up to 1.0.3. This vulnerability affects the function paySuccess of the file /order/paySuccess. The manipulation of the argument orderId results in authorization bypass. The attack can be launched remotely. The exploit has been made public and could be...
mall 安全漏洞
mall is an e-commerce system for macro individual developers, including the front-end mall system and back-end management system. A security vulnerability exists in mall 1.0.3 and earlier versions, which stems from an authorization bypass due to incorrect operation of the parameter orderId in the...
MAL-2025-41502 Malicious code in @twork-data-services/proxy-cms-customer-pay-tokens (npm)
--- -= Per source details. Do not edit below this line.=-...
⚡ Weekly Recap: NFC Fraud, Curly COMrades, N-able Exploits, Docker Backdoors & More
Power doesn't just disappear in one big breach. It slips away in the small stuff—a patch that's missed, a setting that's wrong, a system no one is watching. Security usually doesn't fail all at once; it breaks slowly, then suddenly. Staying safe isn't about knowing everything—it's about acting fa...
