CVE-2023-38353

MiniTool Power Data Recovery version 11.6 and before contains an insecure in-app payment system that allows attackers to steal highly sensitive information through a man in the middle attack...

Cloudflare Public Bug Bounty: Bypass R2 payment screen

The R2 payment screen bypass vulnerability was reported. Due to insufficient access control checks, it had been possible to enable the R2 subscription without having a valid payment method stored. Cloudflare addressed the issue by implementing stricter access controls around subscription enableme...

CVE-2023-4231

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cevik Informatics Online Payment System allows SQL Injection.This issue affects Online Payment System: before 4.09...

CVE-2023-4231

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cevik Informatics Online Payment System allows SQL Injection. This issue affects Online Payment System: before 4.09...

CVE-2023-4231

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cevik Informatics Online Payment System allows SQL Injection. This issue affects Online Payment System: before 4.09...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cevik Informatics Online Payment System allows SQL Injection.This issue affects Online Payment System: before 4.09...

MAL-2023-8107 Malicious code in payment-react-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1be5313ebc025cf120f74736aba05ea6e53d94fb39c36b1097c2803a7f7d70de The OpenSSF Package Analysis project identified 'payment-react-component' @ 1.5.0 npm as malicious. It is considered malicious because: - The...

Malicious code in payment-react-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1be5313ebc025cf120f74736aba05ea6e53d94fb39c36b1097c2803a7f7d70de The OpenSSF Package Analysis project identified 'payment-react-component' @ 1.5.0 npm as malicious. It is considered malicious because: - The...

CVE-2023-4231

CVE-2023-4231 affects Cevik Informatics Online Payment System (versions prior to 4.09). The root cause is improper neutralization of specific elements used in SQL commands, enabling an SQL Injection. CVSSv3.1 metrics (NETWORK, LOW ATTACK COMPLEXITY, NONE PRIVILEGES, UI NONE) yield a CRITICAL 9.8 ...

CVE-2023-4231 SQLi in Cevik Informatics' Online Payment System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cevik Informatics Online Payment System allows SQL Injection. This issue affects Online Payment System: before 4.09...

CVE-2023-4231 SQLi in Cevik Informatics' Online Payment System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cevik Informatics Online Payment System allows SQL Injection. This issue affects Online Payment System: before 4.09...

Cevik Informatics Online Payment System SQL Injection Vulnerability

Cevik Informatics Online Payment System is an online payment system from Cevik Informatics. A SQL injection vulnerability exists in Cevik Informatics Online Payment System versions prior to 4.09, which stems from incorrect neutralization of specific elements used by the system...

PCI DSS v4: Uncovering Web Skimming Threats with Payment Integrations

...

CVE-2023-4948

The WooCommerce CVR Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the refreshordercvrdata AJAX action in versions up to 6.1.0. This makes it possible for authenticated attackers with contributor-level access and above,...

Design/Logic Flaw

The WooCommerce CVR Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the refreshordercvrdata AJAX action in versions up to 6.1.0. This makes it possible for authenticated attackers with contributor-level access and above,...

CVE-2023-4948

CVE-2023-4948 affects the WooCommerce CVR Payment Gateway plugin for WordPress up to version 6.1.0 . The issue is a missing capability check on the refresh_order_cvr_data AJAX action, allowing authenticated attackers with contributor-level access and above to update CVR numbers for orders. The vu...

CVE-2023-4948

The WooCommerce CVR Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the refreshordercvrdata AJAX action in versions up to 6.1.0. This makes it possible for authenticated attackers with contributor-level access and above,...

WordPress WooCommerce CVR Payment Gateway Plugin < 6.1.0 is vulnerable to Broken Access Control

Software WooCommerce CVR Payment Gateway Type Plugin Vulnerable versions 6.1.0 Fixed in 6.1.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-4948 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID d4365149d5e3 Credits Lana Codes Yan&C...

WordPress Plugin WooCommerce CVR Payment Gateway Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress WooCommerce EAN Payment Gateway Plugin < 6.1.0 is vulnerable to Broken Access Control

Software WooCommerce EAN Payment Gateway Type Plugin Vulnerable versions 6.1.0 Fixed in 6.1.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-4947 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 9bfa8f9c4e66 Credits Lana Codes Yan&C...