S-CMS SQL注入漏洞

S-CMS is a PHP and MySQL based Content Management System CMS from China's S-CMS Corporation. A SQL injection vulnerability exists in S-CMS, which originates from the product's failure to securely handle special characters in the Oid parameter in the memberpay.php file. The vulnerability can be...

Several Malware Families Using Pay-Per-Install Service to Expand Their Targets

A detailed examination of a Pay-per-install PPI malware service called PrivateLoader has revealed its crucial role in the delivery of a variety of malware such as SmokeLoader, RedLine Stealer, Vidar, Raccoon, and GCleaner since at least May 2021. Loaders are malicious programs used for loading...

DOS pay function

Handle egjlmn1 Vulnerability details in the pay function users repay their debt and in line 364: it decreases their debt. lets say a user wants to repay all his debt, he calls the pay function with his full debt. an attacker can see it and frontrun to repay a single token for his debt since it's...

dpd-paypal-ap (>=0.0.1, <=0.0.9), paypal-pay (0.1.1) potentially affected by CVE-2020-7643 via paypal-adaptive (>=0.1.1, <=0.4.2)

paypal-adaptive NPM version =0.1.1, =0.0.1, =0.0.9 - paypal-pay 0.1.1 Source cves: CVE-2020-7643 Source advisory: OSV:GHSA-V3R2-3FP4-RP46...

CVE-2021-25527

Improper export of Android application components vulnerability in Samsung Pay India only prior to version 4.1.77 allows attacker to access Bill Pay and Recharge menu without authentication...

CVE-2021-25527

Improper export of Android application components vulnerability in Samsung Pay India only prior to version 4.1.77 allows attacker to access Bill Pay and Recharge menu without authentication...

CVE-2021-25525

Improper check or handling of exception conditions vulnerability in Samsung Pay US only prior to version 4.0.65 allows attacker to use NFC without user recognition...

CVE-2021-25527

Improper export of Android application components vulnerability in Samsung Pay India only prior to version 4.1.77 allows attacker to access Bill Pay and Recharge menu without authentication...

CVE-2021-25525

Improper check or handling of exception conditions vulnerability in Samsung Pay US only prior to version 4.0.65 allows attacker to use NFC without user recognition...

Authentication flaw

Improper export of Android application components vulnerability in Samsung Pay India only prior to version 4.1.77 allows attacker to access Bill Pay and Recharge menu without authentication...

Design/Logic Flaw

Improper check or handling of exception conditions vulnerability in Samsung Pay US only prior to version 4.0.65 allows attacker to use NFC without user recognition...

CVE-2021-25527

Improper export of Android application components vulnerability in Samsung Pay India only prior to version 4.1.77 allows attacker to access Bill Pay and Recharge menu without authentication...

CVE-2021-25527

CVE-2021-25527 affects Samsung Pay in India prior to 4.1.77, where improper export of Android application components allows an attacker to access Bill Pay and Recharge menus without authentication. Root cause: components exported without proper access controls. Impact: affects UI workflows for bi...

CVE-2021-25525

Improper check or handling of exception conditions vulnerability in Samsung Pay US only prior to version 4.0.65 allows attacker to use NFC without user recognition...

CVE-2021-25525

Samsung Pay (US only) versions prior to 4.0.65 are affected by an improper check/handling of exception conditions, allowing an attacker to use NFC without user recognition. The root cause is described as improper exception handling. Impact is unauthorized NFC usage without user interaction. No ex...

Samsung Pay 安全漏洞

Samsung Pay is a mobile payment and digital wallet service from the South Korean company Samsung Samsung. It allows users to make payments using compatible cell phones and other Samsung-made devices. A security vulnerability exists in Samsung Pay India only versions prior to 4.1.77 that stems fro...

PT-2021-16717 · Samsung · Samsung Pay

Name of the Vulnerable Software and Affected Versions: Samsung Pay versions prior to 4.1.77 Description: The issue allows an attacker to access the Bill Pay and Recharge menu without authentication due to improper export of Android application components. This affects Samsung Pay in India...

Samsung Pay 代码问题漏洞

Samsung Pay is a mobile payment and digital wallet service from the South Korean company Samsung Samsung. It allows users to make payments using compatible cell phones and other Samsung-made devices. A security vulnerability exists in versions of Samsung Pay prior to 4.0.65, which stems from the...

The vulnerability of the MasterCard Tokenisation Service (MDES) relates to the exploitation of the vulnerabilities in the GPay/MasterCard pair. This allows attackers to clone transactions and perform payments beyond the limits of the Tap & Go service.

The vulnerability of the MasterCard Tokenisation Service MDES is related to the exploitation of a flaw in the GPay/MasterCard pair. Exploiting this vulnerability could allow an attacker to clone transactions and make payments beyond the limits of the Tap & Go service...

The vulnerability of iOS operating systems, related to deficiencies in authentication procedures, allows a perpetrator to activate the Apple Pay transaction card on a locked or drained phone.

The vulnerability of iOS operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to enable the Apple Pay payment card on a locked or drained phone using a static 15-byte string...