1026 matches found
Pay Slip PDF Generator System 1.0 Shell Upload Vulnerability
Title: Pay Slip PDF Generator System 1.0 Shell Upload Author: Hejap Zairy Vendor: https://www.sourcecodester.com/php/15242/employees-pay-slip-pdf-generator-system-email-using-phpoop-free-source-code.html Software: https://www.sourcecodester.com/sites/default/files/download/oretnom23/pess0.zip...
The pay() function can still be DOSed
Lines of code Vulnerability details Impact From the prior contest: in the pay function users repay their debt and in line 364: it decreases their debt. lets say a user wants to repay all his debt, he calls the pay function with his full debt. an attacker can see it and frontrun to repay a single...
[WP-H1] Wrong timing of check allows users to withdraw collateral without paying for the debt
Lines of code Vulnerability details function payPayParam calldata param external override lock returns uint128 assetIn, uint128 collateralOut requireblock.timestamp = param.ids.length, 'E205'; for uint256 i; i = uint256collateralOut due.debt, 'E303'; due.debt -= param.assetsIni; due.collateral -=...
WordPress Pay With Stripe – Your WordPress Payments Stripe Gateway plugin <= 1.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Pay With Stripe – Your WordPress Payments Stripe Gateway plugin versions = 1.2. Solution Update the Pay With Stripe – Your WordPress Payments Stripe Gateway plugin to the latest available version at...
WordPress Pay For Post with WooCommerce plugin < 3.0.9 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Pay For Post with WooCommerce plugin versions 3.0.9. Solution Update the WordPress Pay For Post with WooCommerce plugin to the latest available version at least 3.0.9...
Malware families using Pay-Per-Install service to expand targets
By Owais Sultan The PrivateLoader is a Pay-Per-Install malware PPI that delivers a wide variety of malware. Including Vidar, Raccoon, Redline,… This is a post from HackRead.com Read the original post: Malware families using Pay-Per-Install service to expand targets...
Samsung Screwed Up Encryption on 100M Phones
Samsung shipped an estimated 100 million smartphones with botched encryption, including models ranging from the 2017 Galaxy S8 on up to last year’s Galaxy S21. Researchers at Tel Aviv University found what they called “severe” cryptographic design flaws that could have let attackers siphon the...
CVE-2022-23336
S-CMS v5.0 was discovered to contain a SQL injection vulnerability in memberpay.php via the Oid parameter...
CVE-2022-23336
S-CMS v5.0 was discovered to contain a SQL injection vulnerability in memberpay.php via the Oid parameter...
S-CMS SQL注入漏洞
S-CMS is a PHP and MySQL based Content Management System CMS from China's S-CMS Corporation. A SQL injection vulnerability exists in S-CMS, which originates from the product's failure to securely handle special characters in the Oid parameter in the memberpay.php file. The vulnerability can be...
Several Malware Families Using Pay-Per-Install Service to Expand Their Targets
A detailed examination of a Pay-per-install PPI malware service called PrivateLoader has revealed its crucial role in the delivery of a variety of malware such as SmokeLoader, RedLine Stealer, Vidar, Raccoon, and GCleaner since at least May 2021. Loaders are malicious programs used for loading...
DOS pay function
Handle egjlmn1 Vulnerability details in the pay function users repay their debt and in line 364: it decreases their debt. lets say a user wants to repay all his debt, he calls the pay function with his full debt. an attacker can see it and frontrun to repay a single token for his debt since it's...
dpd-paypal-ap (>=0.0.1, <=0.0.9), paypal-pay (0.1.1) potentially affected by CVE-2020-7643 via paypal-adaptive (>=0.1.1, <=0.4.2)
paypal-adaptive NPM version =0.1.1, =0.0.1, =0.0.9 - paypal-pay 0.1.1 Source cves: CVE-2020-7643 Source advisory: OSV:GHSA-V3R2-3FP4-RP46...
CVE-2021-25527
Improper export of Android application components vulnerability in Samsung Pay India only prior to version 4.1.77 allows attacker to access Bill Pay and Recharge menu without authentication...
CVE-2021-25527
Improper export of Android application components vulnerability in Samsung Pay India only prior to version 4.1.77 allows attacker to access Bill Pay and Recharge menu without authentication...
CVE-2021-25525
Improper check or handling of exception conditions vulnerability in Samsung Pay US only prior to version 4.0.65 allows attacker to use NFC without user recognition...
CVE-2021-25527
Improper export of Android application components vulnerability in Samsung Pay India only prior to version 4.1.77 allows attacker to access Bill Pay and Recharge menu without authentication...
CVE-2021-25525
Improper check or handling of exception conditions vulnerability in Samsung Pay US only prior to version 4.0.65 allows attacker to use NFC without user recognition...
Authentication flaw
Improper export of Android application components vulnerability in Samsung Pay India only prior to version 4.1.77 allows attacker to access Bill Pay and Recharge menu without authentication...