Lucene search
+L

413 matches found

NVD
NVD
•added 2026/09/02 3:17 p.m.•8 views

CVE-2026-77794

The RegistrationMagic WordPress plugin before 6.0.9.9 does not validate a client-supplied quantity multiplier when calculating the total price of a paid registration, allowing unauthenticated users to register without paying and obtain an activated account holding the role the form grants...

5.3CVSS0.00324EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/02 2:16 p.m.•36 views

CVE-2026-77794 RegistrationMagic 6.0.0.0 - 6.0.9.8 - Unauthenticated Payment Bypass via Zero Quantity

The RegistrationMagic WordPress plugin before 6.0.9.9 does not validate a client-supplied quantity multiplier when calculating the total price of a paid registration, allowing unauthenticated users to register without paying and obtain an activated account holding the role the form grants...

5.3CVSS0.00324EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/02 2:16 p.m.•12 views

CVE-2026-77794 RegistrationMagic 6.0.0.0 - 6.0.9.8 - Unauthenticated Payment Bypass via Zero Quantity

The RegistrationMagic WordPress plugin before 6.0.9.9 does not validate a client-supplied quantity multiplier when calculating the total price of a paid registration, allowing unauthenticated users to register without paying and obtain an activated account holding the role the form grants...

5.3CVSS5.9AI score0.00324EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/02 2:16 p.m.•10 views

CVE-2026-77794

RegistrationMagic (WordPress plugin, versions 6.0.0.0–6.0.9.8) fails to validate a client-supplied quantity multiplier when calculating the total price of a paid registration. An unauthenticated attacker can supply a zero quantity to make the computed price zero, bypassing payment entirely and ob...

5.3CVSS5.9AI score0.00324EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/02 2:16 p.m.•8 views

EUVD-2026-70041

The RegistrationMagic WordPress plugin before 6.0.9.9 does not validate a client-supplied quantity multiplier when calculating the total price of a paid registration, allowing unauthenticated users to register without paying and obtain an activated account holding the role the form grants...

5.3CVSS5.9AI score0.00324EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/02 12:00 a.m.•13 views

PT-2026-84727

The RegistrationMagic WordPress plugin before 6.0.9.9 does not validate a client-supplied quantity multiplier when calculating the total price of a paid registration, allowing unauthenticated users to register without paying and obtain an activated account holding the role the form grants...

5.3CVSS5.9AI score0.00324EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/01 3:17 p.m.•7 views

UBUNTU-CVE-2026-70409

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP eldap allows a malicious or compromised LDAP server to degrade availability by returning a referral URL whose port component is a very long run of digits. eldap:parseport/2 passes the port substring straight to...

6.3CVSS5.3AI score0.00577EPSS
SaveExploits0References8
NVD
NVD
•added 2026/08/31 9:17 p.m.•14 views

CVE-2026-81779

Improper Validation of Specified Quantity in Input vulnerability in Silk Themes Newspapers X allows Malicious Software Implanted. This issue affects Newspapers X: from 1.0.46 through 1.0.48...

10CVSS0.00522EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/31 8:42 p.m.•53 views

CVE-2026-81779

CVE-2026-81779 is a backdoor vulnerability in the Silk Themes Newspapers X WordPress theme, discovered by ashv4ni and reported via Patchstack . It affects versions 1.0.46 through 1.0.48 and is classified as Improper Validation of Specified Quantity in Input , allowing malicious software to be imp...

10CVSS5.9AI score0.00522EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/31 8:42 p.m.•12 views

CVE-2026-81779 WordPress Newspapers X theme 1.0.46-1.0.48 - Backdoor vulnerability

Improper Validation of Specified Quantity in Input vulnerability in Silk Themes Newspapers X allows Malicious Software Implanted. This issue affects Newspapers X: from 1.0.46 through 1.0.48...

10CVSS5.9AI score0.00522EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/31 8:42 p.m.•14 views

EUVD-2026-68805

Improper Validation of Specified Quantity in Input vulnerability in Silk Themes Newspapers X allows Malicious Software Implanted. This issue affects Newspapers X: from 1.0.46 through 1.0.48...

10CVSS5.9AI score0.00522EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/08/31 12:00 a.m.•18 views

PT-2026-84017

Name of the Vulnerable Software and Affected Versions Newspapers X versions 1.0.46 through 1.0.48 Description Improper validation of specified quantity in input allows for the implantation of malicious software. This issue was introduced via a supply chain attack, resulting in a backdoor within t...

10CVSS5.9AI score0.00522EPSS
SaveExploits0References3
CVE
CVE
•added 2026/08/28 10:08 p.m.•37 views

CVE-2026-55764

Klever-Go (the Go implementation of the Klever blockchain protocol), prior to 1.7.19 , contains a signed int64 overflow in the semi-fungible token add-quantity path. In core/kapp/systemAccount/systemAcount.go, SFTAddCirculation added amount to meta.Circulation before comparing against MaxSupply, ...

8.7CVSS6AI score0.00538EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/08/28 10:08 p.m.•41 views

CVE-2026-55764 Klever-Go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, Klever-Go allows a mint-role holder to bypass a finite per-nonce MaxSupply on the semi-fungible token add-quantity path. In core/kapp/systemAccount/systemAcount.go, SFTAddCirculation performed meta.Circulation ...

8.7CVSS0.00538EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/08/28 10:08 p.m.•14 views

CVE-2026-55764 Klever-Go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, Klever-Go allows a mint-role holder to bypass a finite per-nonce MaxSupply on the semi-fungible token add-quantity path. In core/kapp/systemAccount/systemAcount.go, SFTAddCirculation performed meta.Circulation ...

8.7CVSS6AI score0.00538EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/28 10:08 p.m.•13 views

EUVD-2026-68012

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, Klever-Go allows a mint-role holder to bypass a finite per-nonce MaxSupply on the semi-fungible token add-quantity path. In core/kapp/systemAccount/systemAcount.go, SFTAddCirculation performed meta.Circulation ...

8.7CVSS6AI score0.00538EPSS
SaveExploits0References3
NVD
NVD
•added 2026/08/25 1:19 p.m.•11 views

CVE-2026-79406

A security vulnerability has been detected in macrozheng mall up to 1.0.3. Affected is the function OmsCartItemServiceImpl.updateQuantity of the file /cart/update/quantity. The manipulation of the argument quantity leads to business logic errors. The attack may be initiated remotely. The vendor...

5.3CVSS0.00387EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/25 1:00 p.m.•21 views

CVE-2026-79406

macrozheng mall (open-source e-commerce platform) versions up to 1.0.3 contain a business logic error in the function OmsCartItemServiceImpl.updateQuantity , accessible via the endpoint /cart/update/quantity . Manipulating the quantity argument allows a remote, authenticated attacker to trigger l...

5.3CVSS5.1AI score0.00387EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/25 1:00 p.m.•35 views

CVE-2026-79406 macrozheng mall quantity OmsCartItemServiceImpl.updateQuantity logic error

A security vulnerability has been detected in macrozheng mall up to 1.0.3. Affected is the function OmsCartItemServiceImpl.updateQuantity of the file /cart/update/quantity. The manipulation of the argument quantity leads to business logic errors. The attack may be initiated remotely. The vendor...

5.3CVSS0.00387EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/08/25 1:00 p.m.•8 views

CVE-2026-79406 macrozheng mall quantity OmsCartItemServiceImpl.updateQuantity logic error

A security vulnerability has been detected in macrozheng mall up to 1.0.3. Affected is the function OmsCartItemServiceImpl.updateQuantity of the file /cart/update/quantity. The manipulation of the argument quantity leads to business logic errors. The attack may be initiated remotely. The vendor...

5.3CVSS4.8AI score0.00387EPSS
SaveExploits0References6
Rows per page
Query Builder