CVE-2022-29254

silverstripe-omnipay is a SilverStripe integration with Omnipay PHP payments library. For a subset of Omnipay gateways those that use intermediary states like isNotification or isRedirect, if the payment identifier or success URL is exposed it is possible for payments to be prematurely marked as...

CVE-2024-48245

Vehicle Management System 1.0 is vulnerable to SQL Injection. A guest user can exploit vulnerable POST parameters in various administrative actions, such as booking a vehicle or confirming a booking. The affected parameters include "Booking ID", "Action Name", and "Payment Confirmation ID", which...

CVE-2024-48245

Vehicle Management System 1.0 is vulnerable to SQL Injection. A guest user can exploit vulnerable POST parameters in various administrative actions, such as booking a vehicle or confirming a booking. The affected parameters include "Booking ID", "Action Name", and "Payment Confirmation ID", which...

Mollie for Drupal - Moderately critical - Faulty payment confirmation logic - SA-CONTRIB-2023-052

This module enables you to pay online via Mollie. The module might not properly load the correct order to update the payment status when Mollie redirects to the redirect URL. This can allow an attacker to apply other people's orders to their own, getting credit without paying. This vulnerability ...

CVE-2022-1250

The LifterLMS PayPal WordPress plugin before 1.4.0 does not sanitise and escape some parameters from the payment confirmation page before outputting them back in the page, leading to a Reflected Cross-Site Scripting issue...

LifterLMS PayPal < 1.4.0 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape some parameters from the payment confirmation page before outputting them back in the page, leading to a Reflected Cross-Site Scripting issue PoC https://example.com/purchase/confirm-payment/?order=order-xxxxxxx=aa"...

Threat Outbreak Alert RuleID33160: Email Messages Distributing Malicious Software on July 11, 2018

Medium Alert ID: 58428 First Published: 2018 July 11 14:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33160 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID31440: Email Messages Distributing Malicious Software on November 24, 2017

Medium Alert ID: 56046 First Published: 2017 November 27 13:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31440 may contain the following files: Name |...

Threat Outbreak Alert RuleID31217: Email Messages Distributing Malicious Software on November 7, 2017

Medium Alert ID: 55794 First Published: 2017 November 7 13:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31217 may contain the following files: Name |...

Threat Outbreak Alert RuleID30911: Email Messages Distributing Malicious Software on October 11, 2017

Medium Alert ID: 55585 First Published: 2017 October 11 15:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30911 may contain the following files: Name |...

Threat Outbreak Alert RuleID25812: Email Messages Distributing Malicious Software on November 15, 2016

Medium Alert ID: 49716 First Published: 2016 November 15 17:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25812 may contain the following files: Name |...

Threat Outbreak Alert RuleID23863: Email Messages Distributing Malicious Software on July 16, 2016

Medium Alert ID: 47107 First Published: 2016 July 18 14:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23863 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID22038: Email Messages Distributing Malicious Software on April 1, 2016

Medium Alert ID: 44417 First Published: 2016 April 1 16:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22038 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID21922: Email Messages Distributing Malicious Software on March 25, 2016

Medium Alert ID: 44308 First Published: 2016 March 25 13:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21922 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID20378: Email Messages Distributing Malicious Software on May 4, 2016

Medium Alert ID: 42959 First Published: 2016 January 8 20:53 GMT Last Updated: 2016 May 5 12:52 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20378 and...

Threat Outbreak Alert RuleID19889: Email Messages Distributing Malicious Software on December 3, 2015

Medium Alert ID: 42493 First Published: 2015 December 3 20:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19889 may contain the following files: Name |...

Threat Outbreak Alert RuleID19309: Email Messages Distributing Malicious Software on November 10, 2015

Medium Alert ID: 42027 First Published: 2015 November 10 23:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19309 may contain the following files: Name |...

Threat Outbreak Alert RuleID18354: Email Messages Distributing Malicious Software on September 30, 2015

Medium Alert ID: 41299 First Published: 2015 October 2 13:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18354 may contain the following files: Name |...

Threat Outbreak Alert RuleID17159: Email Messages Distributing Malicious Software on February 22, 2016

Medium Alert ID: 40352 First Published: 2015 August 10 14:24 GMT Last Updated: 2016 February 22 20:36 GMT Version: 8 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17159...

Change CMS 3.6.8 - Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications Exploit Title: RBS Change Complet Open Source multiple CSRF vulnerabilities POST and GET Date: 10/10/2014 Exploit Author: KrustyHack Vendor Homepage: http://www.rbschange.fr/ Software Link:...