PT-2025-11485

Name of the Vulnerable Software and Affected Versions Syliud PayPal Plugin versions prior to 1.6.1, 1.7.1, and 2.0.1 Description A vulnerability in the Syliud PayPal Plugin allows users to manipulate the final payment amount processed by PayPal. If a user modifies the item quantity in their...

CVE-2025-29788: External Control of Assumed-Immutable Web Parameter

The Syliud PayPal Plugin is the Sylius Core Team’s plugin for the PayPal Commerce Platform. A vulnerability in versions prior to 1.6.1, 1.7.1, and 2.0.1 allows users to manipulate the final payment amount processed by PayPal. If a user modifies the item quantity in their shopping cart after...

CVE-2025-2278

Improper access control in temporary access requests and checkout requests endpoints in Devolutions Server 2024.3.13 and earlier allows an authenticated user to access information about these requests via a known request ID...

CVE-2025-2278

Improper access control in temporary access requests and checkout requests endpoints in Devolutions Server 2024.3.13 and earlier allows an authenticated user to access information about these requests via a known request ID...

CVE-2025-2278

Improper access control in temporary access requests and checkout requests endpoints in Devolutions Server 2024.3.13 and earlier allows an authenticated user to access information about these requests via a known request ID...

Devolutions Server 安全漏洞

Devolutions Server is an application from Devolutions Canada Inc. which provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server version 2024.3.13 and prior versions, which stems from improper access control in the Temporary...

PT-2025-11172

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions 2024.3.13 and earlier Description: The issue is related to improper access control in temporary access requests and checkout requests endpoints, allowing an authenticated user to access information about these...

Malicious code in wpcom-checkout (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1960 Malicious code in wpcom-checkout (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in meta-checkout (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1899 Malicious code in meta-checkout (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1857 Malicious code in instacart-checkout (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in epicagames-checkout (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in dropbox-checkout (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1783 Malicious code in dropbox-checkout (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in airbnb-checkout (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1706 Malicious code in airbnb-checkout (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2033 Malicious code in checkout-one-time-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b07c8dfeaf38da871c1e555b86d76046f4752bc738bf14ed15147cdadb6d92ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in checkout-one-time-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b07c8dfeaf38da871c1e555b86d76046f4752bc738bf14ed15147cdadb6d92ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paypal-checkout-integration-backend-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8978fb3635d1339256e1aa90eab3f76ba33bad36f9a2ffd70d1f6fc7d60ccca8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...