Malicious code in islands-promo (npm)

The package islands-promo was found to contain malicious code...

MAL-2025-35743 Malicious code in test-mlw2-manet-promo (npm)

The package test-mlw2-manet-promo was found to contain malicious code...

CVE-2025-3863

The Post Carousel Slider for Elementor plugin for WordPress is vulnerable to improper authorization due to a missing capability check on the processwbelpspromoform function in all versions up to, and including, 1.6.0. This makes it possible for authenticated attackers, with Subscriber-level acces...

CVE-2024-45300

alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5, a race condition allows the user to bypass the limit on the number of promo codes and use the discount coupon multiple times. In "alf.io", an event organizer can apply...

CVE-2024-45300

alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5, a race condition allows the user to bypass the limit on the number of promo codes and use the discount coupon multiple times. In "alf.io", an event organizer can apply...

CVE-2024-45300

Vulnerability summary (CVE-2024-45300) : alf.io prior to version 2.0-M5 contains a race condition that lets an attacker bypass the promo-code usage limit and apply a discount coupon multiple times. The underlying issue is a timing gap between checking code usage and enforcing the limit, enabling ...

CVE-2024-45300 Bypassing promo code limitations with race conditions

alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5, a race condition allows the user to bypass the limit on the number of promo codes and use the discount coupon multiple times. In "alf.io", an event organizer can apply...

CVE-2024-45300 Bypassing promo code limitations with race conditions

alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5, a race condition allows the user to bypass the limit on the number of promo codes and use the discount coupon multiple times. In "alf.io", an event organizer can apply...

CVE-2024-45300 Bypassing promo code limitations with race conditions

alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5, a race condition allows the user to bypass the limit on the number of promo codes and use the discount coupon multiple times. In "alf.io", an event organizer can apply...

Malicious code in xbox-promo-checker-api (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6217 Malicious code in xbox-promo-checker-api (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in 3m-promo-link-gen (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4725 Malicious code in 3m-promo-gen-api (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in 3m-promo-gen-api (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in stylelint-config-promo (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in eslint-config-promo (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2322 Malicious code in eslint-config-promo (npm)

--- -= Per source details. Do not edit below this line.=-...

promo-zone.com.mx Improper Access Control vulnerability OBB-3858932

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

promo-service.it Improper Access Control vulnerability OBB-3843943

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

promo-gift.eu Improper Access Control vulnerability OBB-3826874

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...