CVE-2026-54608

MythicalDash , a Pterodactyl client area, is affected in versions 3.5.4-aurora and earlier . The vulnerability resides in the Stripe payment flow : GET /api/stripe/process creates a pending database row and embeds the payment code in a success redirect, while GET /api/stripe/processed accepts tha...

WordPress plugin Payment QR WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

ECMall本地文件包含漏洞

$paycode = !empty$REQUEST'code' ? trim$REQUEST'code' : ''; ... $pluginfile = ROOTPATH . '/includes/payment/' . $paycode . '.php'; if isfile$pluginfile includeonce$pluginfile; 很明显的一个bug 利用的话可以参考flyh4t提到过http://bbs.wolvez.org/topic/56/的一个思路: ECMall 暂无...