CVE-2020-28415

CVE-2020-28415 제안된 설명 TranzWare Payment Gateway 3.1.12.3.2에는 반사형 크로스 사이트 스크립팅XSS 취약점이 존재합니다. 원격의 인증되지 않은 공격자는 조작된 URL을 통해 임의의 HTML 코드를 실행할 수 있습니다CVE-2020-28414와 다른 벡터. 취약점 유형 크로스 사이트 스크립팅 XSS 제품 공급업체 TranzWare 영향을 받는 제품 코드 베이스 Payment Gateway 3.1.12.3.2. 공격 유형 원격 영향 코드 실행 true 공급업체가 취약점을 확인하거나...

CVE-2020-28414

CVE-2020-28414 제안된 설명 TranzWare Payment Gateway 3.1.12.3.2에 반사형 교차 사이트 스크립팅 XSS 취약점이 존재합니다. 원격에서 인증되지 않은 공격자가 조작된 URL을 통해 임의의 HTML 코드를 실행할 수 있습니다. 취약점 유형 교차 사이트 스크립팅 XSS 제품 공급업체 TranzWare 영향받는 제품 코드 베이스 Payment Gateway 3.1.12.3.2. 공격 유형 원격 코드 실행 영향 true 공급업체가 취약점을 확인 또는 인정했습니까? true 참고...

CVE-2021-28109

TranzWare POI FIMI before 4.2.20.4.2 allows logintw.php reflected Cross-Site Scripting XSS...

CVE-2021-28110

/exec in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a vulnerability in its XML parser...

EUVD-2021-14826

Malware in sbrugna...

EUVD-2020-20874

Malware in sbrugna...

EUVD-2021-14812

Malware in sbrugna...

EUVD-2020-20873

Malware in sbrugna...

EUVD-2021-14811

Malware in sbrugna...

EUVD-2021-30057

Malicious code in bioql PyPI...

CVE-2021-43106

A Header Injection vulnerability exists in Compass Plus TranzWare Online FIMI Web Interface Tranzware Online TWO 5.3.33.3 F38 and FIMI 4.2.19.4 25.The HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would just cause the...

CVE-2021-28126

index.jsp in TranzWare e-Commerce Payment Gateway TWEC PG before 3.1.27.5 had a Stored cross-site scripting XSS vulnerability...

CVE-2020-28414

A reflected cross-site scripting XSS vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url different vector than CVE-2020-28415...

CVE-2021-43106

A Header Injection vulnerability exists in Compass Plus TranzWare Online FIMI Web Interface Tranzware Online TWO 5.3.33.3 F38 and FIMI 4.2.19.4 25.The HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would just cause the...

CVE-2021-43106

A Header Injection vulnerability exists in Compass Plus TranzWare Online FIMI Web Interface Tranzware Online TWO 5.3.33.3 F38 and FIMI 4.2.19.4 25.The HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would just cause the...

CVE-2021-43106

A Header Injection vulnerability exists in Compass Plus TranzWare Online FIMI Web Interface Tranzware Online TWO 5.3.33.3 F38 and FIMI 4.2.19.4 25.The HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would just cause the...

Design/Logic Flaw

A Header Injection vulnerability exists in Compass Plus TranzWare Online FIMI Web Interface Tranzware Online TWO 5.3.33.3 F38 and FIMI 4.2.19.4 25.The HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would just cause the...

CVE-2021-43106

A Header Injection vulnerability exists in Compass Plus TranzWare Online FIMI Web Interface Tranzware Online TWO 5.3.33.3 F38 and FIMI 4.2.19.4 25.The HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would just cause the...

CVE-2021-43106

CVE-2021-43106 affects Compass Plus TranzWare Online FIMI Web Interface (TWO) version 5.3.33.3 F38 and FIMI 4.2.19.4. The root cause is improper validation/escaping of the HTTP Host header, leading the server to trust the Host header and redirect requests to a different Domain/IP. Documented impa...

Compass Plus e-Commerce Payment Gateway 安全漏洞

Compass Plus e-Commerce Payment Gateway is an application interface of the Russian company Compass Plus. It provides an API interface for payment functions. A security vulnerability exists in Compass Plus TranzWare Online FIMI Web Interface Tranzware Online TWO 5.3.33.3 F38 and FIMI 4.2.19.4 25,...