Malicious code in paypal-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2dbdf2f5ad866355a0a2188cfabf78be811027c4b9fd82b16212cfb3136e3bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paypal-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f52e534e2e7600406f1799a02a19f324ecf2af590d237af66cd669413c28af5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5240 Malicious code in paypal-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f52e534e2e7600406f1799a02a19f324ecf2af590d237af66cd669413c28af5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7012 Malicious code in vxpattern-lib-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1389b0ec7c0190e59b05c9c0bcab3dcaad7fbf57a1f3228819e0ed647724850 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paypal-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd97a9d3e6b3e04b36b277193e7886377a2ab022ec1ea936f004cf28b20cc621 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5246 Malicious code in paypal-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd97a9d3e6b3e04b36b277193e7886377a2ab022ec1ea936f004cf28b20cc621 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Magento 2 Community Edition DoS vulnerability

A denial-of-service DoS vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. By abusing insufficient brute-forcing defenses in the token exchange protocol, an unauthenticated attacker could disrupt transactions between the Magento merchant a...

GHSA-HRG3-4Q56-P2Q5 Magento 2 Community Edition DoS vulnerability

A denial-of-service DoS vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. By abusing insufficient brute-forcing defenses in the token exchange protocol, an unauthenticated attacker could disrupt transactions between the Magento merchant a...

paypal/adaptivepayments-sdk-php vulnerable to a reflected XSS

paypal/adaptivepayments-sdk-php v3.9.2 is vulnerable to a reflected XSS in the SetPaymentOptions.php resulting code execution...

GHSA-9R4X-3534-W3F9 paypal/adaptivepayments-sdk-php vulnerable to a reflected XSS

paypal/adaptivepayments-sdk-php v3.9.2 is vulnerable to a reflected XSS in the SetPaymentOptions.php resulting code execution...

New Unpatched Bug Could Let Attackers Steal Money from PayPal Users

A security researcher claims to have discovered an unpatched vulnerability in PayPal's money transfer service that could allow attackers to trick victims into unknowingly completing attacker-directed transactions with a single click. Clickjacking, also called UI redressing, refers to a technique...

MAL-2022-5243 Malicious code in paypal-rest-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f5c6beb6bf6ebdd58d3baff1e4017eacb25c5cda9a802eb8dbb5e2d2abbd8b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paypal-rest-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f5c6beb6bf6ebdd58d3baff1e4017eacb25c5cda9a802eb8dbb5e2d2abbd8b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-2QFV-WWFX-FH34 paypal/permissions-sdk-php reflected Cross-site Scripting (XSS)

paypal/permissions-sdk-php is vulnerable to reflected XSS in the samples/GetAccessToken.php verificationcode parameter, resulting in code execution...

paypal/permissions-sdk-php reflected Cross-site Scripting (XSS)

paypal/permissions-sdk-php is vulnerable to reflected XSS in the samples/GetAccessToken.php verificationcode parameter, resulting in code execution...

GHSA-626W-HMPW-X74J paypal/invoice-sdk-php reflected XSS

paypal/invoice-sdk-php is vulnerable to reflected XSS in samples/permissions.php via the permToken parameter, resulting in code execution...

GHSA-P4G7-WJHQ-9R2H PayPal PHP Merchant SDK Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in GetAuthDetails.html.php in PayPal PHP Merchant SDK aka merchant-sdk-php 3.9.1 allows remote attackers to inject arbitrary web script or HTML via the token parameter...

PayPal PHP Merchant SDK Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in GetAuthDetails.html.php in PayPal PHP Merchant SDK aka merchant-sdk-php 3.9.1 allows remote attackers to inject arbitrary web script or HTML via the token parameter...

Moodle Unauthenticated users can trigger custom messages to admin via paypal enrol script

A flaw was found in Moodle 3.4 to 3.4.1, 3.3 to 3.3.4, 3.2 to 3.2.7, 3.1 to 3.1.10 and earlier unsupported versions. Unauthenticated users can trigger custom messages to admin via paypal enrol script. Paypal IPN callback script should only send error emails to admin after request origin was...

GHSA-V9XQ-VH72-CHR4 Moodle Unauthenticated users can trigger custom messages to admin via paypal enrol script

A flaw was found in Moodle 3.4 to 3.4.1, 3.3 to 3.3.4, 3.2 to 3.2.7, 3.1 to 3.1.10 and earlier unsupported versions. Unauthenticated users can trigger custom messages to admin via paypal enrol script. Paypal IPN callback script should only send error emails to admin after request origin was...