Code-Projects Simple Gym Management System SQL Injection Vulnerability

Code-Projects Simple Gym Management System is an open-source gym management system developed by Code-Projects. Version 1.0 of the Code-Projects Simple Gym Management System has a SQL injection vulnerability. This vulnerability arises from incorrect operations on parameters such as...

EUVD-2004-1206

Malware in sbrugna...

Malicious code in p2p-amount-field (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c708cc5ca0100211486fde89b6f6ed0a2e1bf6458524412d0cf66ab6b5698839 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5172 Malicious code in p2p-amount-field (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c708cc5ca0100211486fde89b6f6ed0a2e1bf6458524412d0cf66ab6b5698839 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5432 Malicious code in pp-amount-field (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25fda0186ce26a0871fe78f3ec99900b6d2f42baa4d4ecb6ea1590d3076b8386 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pp-amount-field (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25fda0186ce26a0871fe78f3ec99900b6d2f42baa4d4ecb6ea1590d3076b8386 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MasterCard Tokenisation Service Visa Tokenisation Service Arbitrary Amount Modification

The vulnerability of MasterCard Tokenisation Service MDES and Visa Tokenisation Service VTS lies in the possibility of arbitrary modification of the “Amount” field in the Authorisation Request ISO 8583 packet. Exploiting this vulnerability could allow attackers to use cryptographic keys to carry...

MasterCard Tokenisation Service Visa Tokenisation Service ARQC Missing Field Disclosure

The vulnerability of MasterCard Tokenisation Service MDES and Visa Tokenisation Service VTS lies in the possibility of arbitrary modification of the “Amount” field in the Authorisation Request ISO 8583 packet. Exploiting this vulnerability could allow a malicious actor to disclose protected...

PT-2021-5135

Name of the Vulnerable Software and Affected Versions MasterCard Tokenisation Service MDES affected versions not specified Visa Tokenisation Service VTS affected versions not specified Description The issue is related to the arbitrary modification of the Amount field in the ISO 8583 Authorisation...

PT-2021-5136

Name of the Vulnerable Software and Affected Versions MasterCard Tokenisation Service MDES affected versions not specified Visa Tokenisation Service VTS affected versions not specified Description The issue is related to the arbitrary modification of the Amount field in the ISO 8583 Authorisation...

CVE-2004-1209: Undefined Security Weakness

Verisign Payflow Link, when running with empty Accepted URL fields, does not properly verify the data in the hidden AMOUNT field, which allows remote attackers to modify the price of the items that they purchase...