CVE-2022-36839

CVE-2022-36839 affects Samsung Checkout’s IAPService, with a SQL injection on IAP information exposure. Affected releases are prior to version 5.0.53.1; upgrading to 5.0.53.1 or later is the indicated remediation. The root cause is an SQL injection vulnerability in the IAPService, enabling access...

PT-2022-23643 · Samsung · Samsung Checkout

Name of the Vulnerable Software and Affected Versions: Samsung Checkout versions prior to 5.0.53.1 Description: The issue allows attackers to access IAP information via SQL injection vulnerability in the IAPService of Samsung Checkout. Recommendations: For versions prior to 5.0.53.1, update to...

Supersmart 安全漏洞

Supersmart is an artificially intelligent automated checkout for brick-and-mortar retail from Israel's Supersmart. Supersmart Walk suffers from a security vulnerability that stems from the presence of unauthorized actions performed on other customers, which can be exploited by an attacker to rese...

SAMSUNG Checkout SQL注入漏洞

SAMSUNG Checkout is a checkout system from Samsung South Korea. A security vulnerability exists in SAMSUNG Checkout versions prior to 5.0.53.1, which stems from an SQL injection vulnerability in IAPService that can be exploited by an attacker to access IAP information...

CVE-2022-36882

A cross-site request forgery CSRF vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit...

Supersmart 安全漏洞

Supersmart is an artificially intelligent automated checkout for brick-and-mortar retail by Israel's Supersmart. Supersmart has a security vulnerability that stems from accessing business information without authentication...

Malicious code in paytm-blink-checkout-react-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 385c2fcacf3dc11e4b650087cb43c2981965b79ff503bf07434e1464fd9a131d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in checkout-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca9e6d5018ee97b11c90da4875e70f5f45b25db13e328e6c5b546136658bba2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1894 Malicious code in checkout-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca9e6d5018ee97b11c90da4875e70f5f45b25db13e328e6c5b546136658bba2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xo-hermes-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 436b2d277ba73416e1273b318bbb98fba6903b23dfb5ac703793e9ae90bb920a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7287 Malicious code in xo-hermes-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 436b2d277ba73416e1273b318bbb98fba6903b23dfb5ac703793e9ae90bb920a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in checkout-ui-extensions-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c25450076a9e57d735b2419ed90952fb2839f98f25fd1f4f34c984c48d33de75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sdm.checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20d9a885e2581a4421abbcd41b43215ea4215e29e0dc440b75224cd0eee85866 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1084 Malicious code in argo-checkout-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c373b0a40b665237b1cb71fe9e3719627c2bb16ff0658a673a3181666aa81bff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in argo-checkout-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c373b0a40b665237b1cb71fe9e3719627c2bb16ff0658a673a3181666aa81bff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-checkout-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee64b0c73150a9bc88d72723046c6848958f503781788be03e8f8724c044ad24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2926 Malicious code in express-checkout-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee64b0c73150a9bc88d72723046c6848958f503781788be03e8f8724c044ad24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6334 Malicious code in stripe-sample-checkout-with-multiple-locales (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a5127c9b20f47a124652e677f9daad7de2b92db74de80d7159546e92c175584 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3678 Malicious code in hosted-checkout-tutorial (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b28fec32c2291a635a7818b08faccb32ba2b20f87616d26a8cf6d0604884065d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hosted-checkout-tutorial (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b28fec32c2291a635a7818b08faccb32ba2b20f87616d26a8cf6d0604884065d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...