23 matches found
CVE-2026-89309
The authorization middleware of the WMS MobileServer fails to require authentication in two distinct cases. First, it only requires an Authorization header for GET and HEAD requests; requests using any other HTTP method are processed without an authentication check. Second, for any HTTP method...
CVE-2026-89309
The WMS MobileServer authorization middleware contains a missing authentication vulnerability (CWE-306 ). The middleware fails to require authentication in two scenarios: first, it only enforces checks for GET and HEAD requests, allowing other HTTP methods to bypass security. Second, it permits r...
CVE-2026-89309 Missing Authentication Vulnerability in JTL-WMS
The authorization middleware of the WMS MobileServer fails to require authentication in two distinct cases. First, it only requires an Authorization header for GET and HEAD requests; requests using any other HTTP method are processed without an authentication check. Second, for any HTTP method...
PT-2026-111333
Name of the Vulnerable Software and Affected Versions tbc versions prior to 1 Description The authorization middleware of the WMS MobileServer fails to enforce authentication in two scenarios. First, authentication is only required for GET and HEAD requests, allowing other HTTP methods to be...
CVE-2026-19616
Missing Authorization vulnerability in TBC Technology Inc. KitLogistic allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects KitLogistic: before v2.2.2...
EUVD-2026-68521
Missing Authorization vulnerability in TBC Technology Inc. KitLogistic allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects KitLogistic: before v2.2.2...
CVE-2026-19616 Information Disclosure in TBC Technology's KitLogistic
Missing Authorization vulnerability in TBC Technology Inc. KitLogistic allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects KitLogistic: before v2.2.2...
CVE-2026-19616
CVE-2026-19616 is a Missing Authorization vulnerability in TBC Technology Inc. KitLogistic prior to v2.2.2 . The flaw allows an attacker to access functionality not properly constrained by ACLs , meaning unauthorized network-based access to restricted features is possible without credentials or u...
CVE-2026-19616 Information Disclosure in TBC Technology's KitLogistic
Missing Authorization vulnerability in TBC Technology Inc. KitLogistic allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects KitLogistic: before v2.2.2...
PT-2026-83809
Missing Authorization vulnerability in TBC Technology Inc. KitLogistic allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects KitLogistic: before v2.2.2...
CVE-2026-19616: Missing Authorization
Missing Authorization vulnerability in TBC Technology Inc. KitLogistic allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects KitLogistic: before v2.2.2...
CVE-2025-32611 WordPress WooCommerce TBC Credit Card Payment Gateway (Free) Plugin <= 2.0.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in We Are De WooCommerce TBC Credit Card Payment Gateway Free allows Reflected XSS. This issue affects WooCommerce TBC Credit Card Payment Gateway Free: from n/a through 2.0.0...
CVE-2025-32611
CVE-2025-32611 is a reported Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin WooCommerce TBC Credit Card Payment Gateway (Free) . The issue arises from improper neutralization of input during web page generation , enabling an attacker to craft a URL that, when visited b...
PT-2025-17138 · WordPress · Woocommerce Tbc Credit Card Payment Gateway
Name of the Vulnerable Software and Affected Versions: WooCommerce TBC Credit Card Payment Gateway Free versions n/a through 2.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS...
CVE-2025-32611: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in We Are De WooCommerce TBC Credit Card Payment Gateway Free woo-tbc-payment-gateway allows Reflected XSS.This issue affects WooCommerce TBC Credit Card Payment Gateway Free: from n/a through = 2.0.0...
WordPress plugin WooCommerce TBC Credit Card Payment Gateway (Free) 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. wordpress plugin is an application plugin. A cross-site scripting vulnerability...
tbc.co.kr Cross Site Scripting vulnerability OBB-4034468
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
tbc-online.nl Cross Site Scripting vulnerability OBB-2374859
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
tbc-elearning.com Improper Access Control vulnerability OBB-1246712
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
