Lucene search
+L

3186 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 5:36 a.m.•16 views

CVE-2013-0182

The Payment module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to payments, which allows remote attackers to read arbitrary payments...

5CVSS6AI score0.01369EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 5:09 a.m.•22 views

CVE-2019-2773

Vulnerability in the Oracle Payments component of Oracle E-Business Suite subcomponent: File Transmission. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

5.8CVSS6.5AI score0.01302EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:53 a.m.•23 views

CVE-2019-2782

Vulnerability in the Oracle Payments component of Oracle E-Business Suite subcomponent: File Transmission. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

7.5CVSS7.3AI score0.01675EPSS
SaveExploits0References1
osv_drupal
osv_drupal
•added 2025/05/21 5:28 p.m.•28 views

DRUPAL-CONTRIB-2025-067

This module enables you to pay for Commerce order to an environment provided and secured by the bank The module doesn't sufficiently verify the payment status on canceled orders. An attacker can issue a specially crafted request to update the order status to completed...

8.8CVSS5.8AI score0.00329EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/04/29 2:30 a.m.•40 views

Security Bulletin: IBM Safer Payments vulnerable to Denial Of Service Attacks (CVE-2020-4729)

Summary IBM Safer Payments can be crashed by sending specially crafted API calls. This vulnerability has been addressed. Vulnerability Details CVEID:CVE-2020-4729 DESCRIPTION: IBM Counter Fraud Management for Safer Payments could allow an authenticated attacker under special circumstances to send...

5.3CVSS5.9AI score0.00648EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/04/25 11:20 p.m.•17 views

CVE-2025-39563

Cross-Site Request Forgery CSRF vulnerability in WP Trio Conditional Payments for WooCommerce conditional-payments-for-woocommerce allows Cross Site Request Forgery.This issue affects Conditional Payments for WooCommerce: from n/a through = 3.3.0...

6.5CVSS8.6AI score0.00257EPSS
SaveExploits0References1
HackRead
HackRead
•added 2025/04/23 10:14 a.m.•22 views

M&S Cyberattack Disrupts Contactless Payments and Click & Collect Services

Marks & Spencer M&S cyberattack disrupts contactless payments and Click & Collect; investigation launched as retailer apologises and…...

7.4AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2025/04/23 12:00 a.m.•19 views

Developing a Blockchain-Based Secure Digital Contents Distribution System

As digital content distribution expands rapidly through online platforms, securing digital media and protecting intellectual property has become increasingly complex. Traditional centralized systems, while widely adopted, suffer from vulnerabilities such as single points of failure and limited...

7.1AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2025/04/21 12:00 a.m.•24 views

A Comprehensive Survey of Cybercrimes in India over the Last Decade

Since the 1990s, the integration of technology into daily life has led to the creation of an extensive network of interconnected devices, transforming how individuals and organizations operate. However, this digital transformation has also spurred the rise of cybercrime, criminal activities...

6.7AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/17 12:00 a.m.•9 views

CVE-2025-32513: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in totalprocessing Nomupay Payment Processing Gateway totalprocessing-card-payments allows Reflected XSS.This issue affects Nomupay Payment Processing Gateway: from n/a through = 7.1.6...

7.1CVSS8.6AI score0.00293EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/04/16 1:59 p.m.•18 views

WordPress Conditional Payments for WooCommerce plugin <= 3.3.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by luckybuddy in WordPress Plugin Conditional Payments for WooCommerce versions = 3.3.0...

6.5CVSS8.4AI score0.00257EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
•added 2025/04/16 12:44 p.m.•11 views

CVE-2025-39563 WordPress Conditional Payments for WooCommerce <= 3.3.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in WP Trio Conditional Payments for WooCommerce allows Cross Site Request Forgery. This issue affects Conditional Payments for WooCommerce: from n/a through 3.3.0...

6.5CVSS8.4AI score0.00257EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/16 12:44 p.m.•32 views

CVE-2025-39563 WordPress Conditional Payments for WooCommerce plugin <= 3.3.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in WP Trio Conditional Payments for WooCommerce conditional-payments-for-woocommerce allows Cross Site Request Forgery.This issue affects Conditional Payments for WooCommerce: from n/a through = 3.3.0...

6.5CVSS0.00257EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/16 12:44 p.m.•80 views

CVE-2025-39563

CVE-2025-39563: A CSRF vulnerability in the WordPress plugin Conditional Payments for WooCommerce affects versions up to 3.3.0. The issue enables Cross-Site Request Forgery with attacker-controlled state changes by an authenticated user (UI: REQUIRED; PR: NONE; AV: NETWORK; C/I: NONE; A: HIGH). T...

6.5CVSS8.4AI score0.00257EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•17 views

WordPress Plugin: Conditional Payments for WooCommerce – Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

6.5CVSS8.3AI score0.00257EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/16 12:00 a.m.•5 views

CVE-2025-39563: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WP Trio Conditional Payments for WooCommerce conditional-payments-for-woocommerce allows Cross Site Request Forgery.This issue affects Conditional Payments for WooCommerce: from n/a through = 3.3.0...

6.5CVSS8.6AI score0.00257EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/16 12:00 a.m.•6 views

PT-2025-16655

Name of the Vulnerable Software and Affected Versions WP Trio Conditional Payments for WooCommerce versions 3.3.0 and earlier Description A Cross-Site Request Forgery CSRF issue allows unauthorized actions to be performed on behalf of a user. This can lead to various security problems, including...

6.5CVSS5.7AI score0.00257EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/04/13 9:24 a.m.•39 views

CVE-2025-32601

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in twispay Twispay Credit Card Payments twispay allows Reflected XSS.This issue affects Twispay Credit Card Payments: from n/a through = 2.1.2...

7.1CVSS8.6AI score0.00346EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/04/12 12:31 p.m.•603 views

Exploit for Improper Authentication in Automattic Woocommerce_Payments

CVE-2023-28121 usage: CVE-2023-28121.py -h -v RHOST R...

9.8CVSS9.1AI score0.87045EPSS
SaveExploits9
RedhatCVE
RedhatCVE
•added 2025/04/12 8:49 a.m.•36 views

CVE-2025-32119

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CardGate CardGate Payments for WooCommerce cardgate allows Blind SQL Injection.This issue affects CardGate Payments for WooCommerce: from n/a through = 3.2.1...

8.2CVSS8.6AI score0.00339EPSS
SaveExploits0References1
Rows per page
Query Builder