CVE-2026-33731: Insufficient Verification of Data Authenticity

WWBN AVideo is an open source video platform. In versions prior to 29.0, the Authorize.Net webhook handler at plugin/AuthorizeNet/webhook.php contains a signature verification bypass that allows an attacker to forge webhook requests with arbitrary payment amounts and target user IDs. By supplying...

EUVD-2017-16846

Malware in sbrugna...

CVE-2017-7871

trollepierre/tdm before 2017-04-13 is vulnerable to a reflected XSS in tdm-master/webhook.php challenge parameter...

Timing Attack

barzahlen/barzahlen-php is vulnerable to Timing Attacks. The vulnerability exists via the verify function in Webhook.php, which allows an attacker to gain timing information of the application, which can leads to Information Disclosure...

CVE-2016-15015

A vulnerability, which was classified as problematic, was found in viafintech Barzahlen Payment Module PHP SDK up to 2.0.0. Affected is the function verify of the file src/Webhook.php. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high. The...

CVE-2016-15015

A vulnerability, which was classified as problematic, was found in viafintech Barzahlen Payment Module PHP SDK up to 2.0.0. Affected is the function verify of the file src/Webhook.php. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high. The...

CVE-2016-15015: Observable Timing Discrepancy

A vulnerability, which was classified as problematic, was found in viafintech Barzahlen Payment Module PHP SDK up to 2.0.0. Affected is the function verify of the file src/Webhook.php. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high. The...

CVE-2017-7871

trollepierre/tdm before 2017-04-13 is vulnerable to a reflected XSS in tdm-master/webhook.php challenge parameter...

Design/Logic Flaw

trollepierre/tdm before 2017-04-13 is vulnerable to a reflected XSS in tdm-master/webhook.php challenge parameter...

CVE-2017-7871

trollepierre/tdm before 2017-04-13 is vulnerable to a reflected XSS in tdm-master/webhook.php challenge parameter...

CVE-2017-7871: Improper Neutralization of Input During Web Page Generation

trollepierre/tdm before 2017-04-13 is vulnerable to a reflected XSS in tdm-master/webhook.php challenge parameter...

PT-2017-17964

Name of the Vulnerable Software and Affected Versions trollepierre/tdm versions prior to 2017-04-13 Description The issue is related to a reflected XSS in the tdm-master/webhook.php file, specifically affecting the challenge parameter. Recommendations For versions prior to 2017-04-13, consider...