CVE-2025-5977 code-projects School Fees Payment System datatable.php sql injection

A vulnerability was found in code-projects School Fees Payment System 1.0 and classified as critical. This issue affects some unknown processing of the file /datatable.php. The manipulation of the argument sSortDir0 leads to sql injection. The attack may be initiated remotely. The exploit has bee...

CVE-2025-5971

A vulnerability was found in code-projects School Fees Payment System 1.0. It has been classified as critical. This affects an unknown part of the file /ajx.php. The manipulation of the argument namestartsWith leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-5971 code-projects School Fees Payment System ajx.php sql injection

A vulnerability was found in code-projects School Fees Payment System 1.0. It has been classified as critical. This affects an unknown part of the file /ajx.php. The manipulation of the argument namestartsWith leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-5971

The CVE-2025-5971 entry concerns code-projects School Fees Payment System v1.0 with an SQL injection in the /ajx.php file, caused by unsafely handling the name_startsWith parameter. The vulnerability can be exploited remotely and may lead to data disclosure or modification as described across CNV...

firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A clickjacking vulnerability could be used to trick a user into leaking saved payment card details to a malicious page...

FIN6 Uses AWS-Hosted Fake Resumes on LinkedIn to Deliver More_eggs Malware

The financially motivated threat actor known as FIN6 has been observed leveraging fake resumes hosted on Amazon Web Services AWS infrastructure to deliver a malware family called Moreeggs. "By posing as job seekers and initiating conversations through platforms like LinkedIn and Indeed, the group...

Code-Projects School Fees Payment System 授权问题漏洞

School Fees Payment System is a tuition payment system. The School Fees Payment System has an improper authentication vulnerability that can be exploited by an attacker to compromise confidentiality, integrity, and availability...

Code-Projects School Fees Payment System 注入漏洞

School Fees Payment System is a tuition payment system. The School Fees Payment System suffers from a SQL injection vulnerability that originates from the parameter ID of the /branch.php file not being securely filtered. The vulnerability can be exploited by an attacker to obtain sensitive...

CVE-2025-48147

Missing Authorization vulnerability in Crypto Cloud CryptoCloud - Crypto Payment Gateway cryptocloud-crypto-payment-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CryptoCloud - Crypto Payment Gateway: from n/a through = 2.1.2...

CVE-2025-48147

CVE-2025-48147 corresponds to a Missing/Broken Access Control in the WordPress plugin CryptoCloud – Crypto Payment Gateway (cryptocloud-crypto-payment-gateway) up to version 2.1.2. The root cause is incorrectly configured access control security levels, enabling unauthorized access to privileged ...

CVE-2025-48147 WordPress CryptoCloud - Crypto Payment Gateway plugin <= 2.1.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Crypto Cloud CryptoCloud - Crypto Payment Gateway cryptocloud-crypto-payment-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CryptoCloud - Crypto Payment Gateway: from n/a through = 2.1.2...

CVE-2025-48147 WordPress CryptoCloud - Crypto Payment Gateway plugin <= 2.1.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Crypto Cloud CryptoCloud - Crypto Payment Gateway cryptocloud-crypto-payment-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CryptoCloud - Crypto Payment Gateway: from n/a through = 2.1.2...

firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A clickjacking vulnerability could be used to trick a user into leaking saved payment card details to a malicious page...

firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A clickjacking vulnerability could be used to trick a user into leaking saved payment card details to a malicious page...

firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A clickjacking vulnerability could be used to trick a user into leaking saved payment card details to a malicious page...

firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A clickjacking vulnerability could be used to trick a user into leaking saved payment card details to a malicious page...

firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A clickjacking vulnerability could be used to trick a user into leaking saved payment card details to a malicious page...

WordPress plugin CryptoCloud - Crypto Payment Gateway 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. An elevation of privilege vulnerability exists in the WordPress CryptoCloud - Crypto Payment Gateway plugin, which stems from improperly configured access control, for which no...

CVE-2025-31000

Missing Authorization vulnerability in Miguel Fuentes Payment QR WooCommerce payment-qr-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Payment QR WooCommerce: from n/a through = 1.1.6...

Malicious code in ml-payment (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b15f383166aad3ae73303a775a513a1ea7c14f763d168d6dc1eb971abf0cd0e Any computer that has this package installed or running should be considered...