CVE Intelligence

Vulnerabilidades de Goodoneuz

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Goodoneuz: 1 registro(s), com severidade, exploração e correções.

Pay-uz 1

Somente exploradas (KEV) →

CVE-2026-31843 Crítica · 9.8 CWE-284 16/04/2026
goodoneuz/pay-uz Unauthenticated PHP File Overwrite via /payment/api/editable/update Leading to Remote Code Execution
The goodoneuz/pay-uz Laravel package (<= 2.2.24) contains a critical vulnerability in the /payment/api/editable/update endpoint that allows unauthenticated attackers to overwrite existing PHP payment hook files. The endpoint is exposed via Route::any without authentication middleware, enabling remote access without credentials.