3395 matches found
CVE-2024-38699
CVE-2024-38699 concerns the Wallet System for WooCommerce (WordPress plugin) with Missing Authorization allowing access to wallet-related functionality not properly constrained by ACLs. Public details indicate affected versions up to 2.5.13, and a remediation path is to upgrade to a version later...
PT-2024-28143 · Woocommerce · Wallet System For Woocommerce
Name of the Vulnerable Software and Affected Versions: Wallet System for WooCommerce versions 2.5.13 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by Access Control Lists ACLs. This means that...
WordPress plugin Wallet System for WooCommerce 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in th...
INTERPOL Recovers $41 Million in Largest Ever BEC Scam in Singapore
INTERPOL said it devised a "global stop-payment mechanism" that helped facilitate the largest-ever recovery of funds defrauded in a business email compromise BEC scam. The development comes after an unnamed commodity firm based in Singapore fell victim to a BEC scam in mid-July 2024. It refers to...
Data Wallets Using the Solid Protocol
I am the Chief of Security Architecture at Inrupt, Inc., the company that is commercializing Tim Berners-Lees Solid open W3C standard for distributed data ownership. This week, we announced a digital wallet based on the Solid architecture. Details are here, but basically a digital wallet is a...
WazirX Cryptocurrency Exchange Loses $230 Million in Major Security Breach
Indian cryptocurrency exchange WazirX has confirmed that it was the target of a security breach that led to the theft of $230 million in cryptocurrency assets. "A cyber attack occurred in one of our multi-signature wallets involving a loss of funds exceeding $230 million," the company said in a...
Session Timeout are Not Applied on StoreFront Servers
Session timeout are not applied on the StoreFront servers. When a user tries to log on or launch an application the following error is displayed: Logon has expired. Restarting the Wallet services and upgrading to StoreFront 2.6 did not resolve the issue...
Error "Failed to create the Credential Wallet replication channel" after Upgrading StoreFront to Version 3.0.0.44
After upgrading previous versions of StoreFront to version 3.0.0.44 the following issues can be seen. Event Viewer Applications and Services Logs Citrix Delivery Services log: Level: Error, Source: Citrix Credential Wallet Service, Event ID: 1, Task Category 2302 Error Text:Failed to create the...
CVE-2024-6353
The Wallet for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'searchvalue' parameter in all versions up to, and including, 1.5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possib...
WordPress Wallet for WooCommerce plugin <= 1.5.4 - Authenticated (Subscriber+) SQL Injection via 'search[value]' vulnerability
Authenticated Subscriber+ SQL Injection via 'searchvalue' vulnerability discovered by 1337Wannabe in WordPress Plugin TeraWallet – For WooCommerce versions = 1.5.4...
WordPress plugin Wallet for WooCommerce security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...
WordPress Wallet System for WooCommerce plugin <= 2.5.13 - Sensitive Data Exposure via Exported File vulnerability
Sensitive Data Exposure via Exported File vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Wallet System for WooCommerce versions = 2.5.13...
WordPress Wallet System for WooCommerce Plugin <= 2.5.13 is vulnerable to Sensitive Data Exposure
Software Wallet System for WooCommerce Type Plugin Vulnerable versions = 2.5.13 Fixed in 2.5.14 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-38699 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 327b356a379c Credits Joshua Ch...
Security Analysis of the EU’s Digital Wallet
A group of cryptographers have analyzed the eiDAS 2.0 regulation electronic identification and trust services that defines the new EU Digital Identity Wallet...
Malicious code in Solnеt.Wаllet឵ (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Solոеt.Net.Wаllеt (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Notus.Wallet.Utility.Net (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Blockcоre.Fеatures.WalletNotify (NuGet)
--- -= Per source details. Do not edit below this line.=-...