GHSA-3WH2-2PP3-2823 Malicious Package in simple-alipay

Version 1.0.1 of simple-alipay contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.1 of this module is found installed you wi...

Malicious Package in simple-alipay

Version 1.0.1 of simple-alipay contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.1 of this module is found installed you wi...

Logic Flaw Vulnerability in Shop7 Online Shopping System Flagship Edition

Shop7 online shopping system flagship version is to support Alipay, WeChat payment and a variety of commonly used interfaces, computer version and cell phone version and APP seamless combination of data as a whole. Shop7 online shopping system flagship version of the existence of logical flaws in...

Malicious Package

Overview alipay-escrow is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using alipay-escrow...

Malicious Package

Overview alipay-dualfun is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using alipay-dualf...

(0Day) Alibaba Alipay URL Scheme Handling Vulnerability

This vulnerability allows local attackers to modify requests on affected installations of Alibaba Alipay. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of URL...

CVE-2019-9762

A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. The vulnerability does not need any authentication...

Sql injection

A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. The vulnerability does not need any authentication...

PHPSHE SQL Injection Vulnerability (CNVD-2019-12691)

Lingbao Jane Hao Network Technology PHPSHE is an online shopping mall system of China Lingbao Jane Hao Network Technology Company. The system supports express tracking, online chat, order evaluation and statistics and other functions. A SQL injection vulnerability exists in the...

CVE-2019-6805

SQL Injection was found in S-CMS version V3.0 via the alipay/alipayapi.php Oid parameter...

CVE-2019-6805

SQL Injection was found in S-CMS version V3.0 via the alipay/alipayapi.php Oid parameter...

CVE-2019-6805

CVE-2019-6805 is a SQL injection vulnerability in S-CMS v3.0, exploitable via the alipay/alipayapi.php O_id parameter. The issue allows partial to full disclosure/impact on confidentiality, integrity, and availability (per CVSS 2.0/3.0 vectors; base scores 7.5 and 9.8 respectively). The provided ...

New Ransomware Spreading Rapidly in China Infected Over 100,000 PCs

A new piece of ransomware is spreading rapidly across China that has already infected more than 100,000 computers in the last four days as a result of a supply-chain attack... and the number of infected users is continuously increasing every hour. What's Interesting? Unlike almost every ransomwar...

Malicious Package

Overview Version 1.0.1 of simple-alipay contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.1 of this module is found install...

Wise Ride Android App Has Logic Design Flaws

Smart Ride Ride Le app is a smart city public bike rental app. There is a logic design loophole in the Zhixing Jiale Android app. After logging into the system, an attacker can modify the amount of payment arbitrarily by clicking on the "Alipay Payment Credit Deposit" option and intercepting it...

Road to Health Android App Has Logic Design Flaws

Health Road APP is a medical service platform that provides users with services such as registration, consultation, physical examination and accompanying consultation. A logic design vulnerability exists in the Health Road Android APP. The vulnerability is due to the failure of the Alipay payment...

QrlJacker - QrlJacking Exploitation Framework

A python framework which goal is to exploit QrlJacking attack vector easily Installation Requirements Python 2.7.x Requests Pillow Selenium configparser Installation on Windows After downloading the framework cd QrlJacking-Framework pip install -r requirements.txt python QRLJacker.py Installation...

The micro-engine technology-no need to login-payment-alipay-sql injection

No description provided by source...

Uber: reopen #128853 (Information disclosure at lite.uber.com)

Issue in 128853 occurs again. 1. go to https://login.uber.com/oauth/v2/authorize?responsetype=code&redirecturi=https%3A%2F%2Flite.uber.com%2Fauth%2Fcallback&scope=profile%20history%20places%20historylite%20requestreceipt%20request%20paymentbaiduwallet&clientid=y-JJyZRABnEwbJQq4VdQPORo4EKqv0j 2...

Netease mailbox leaked battle network PayPal, etc. accounts may be hacked-vulnerability warning-the black bar safety net

The black bar safety net announced the discovery of Netease mailbox new vulnerability, this vulnerability may lead to Netease mailbox over a million data leaks, involving Netease mailbox-war network account number, PayPal account number and other network accounts fear will be affected, recommende...