Malicious code in @ginger-team/payment-form (npm)

The package @ginger-team/payment-form was found to contain malicious code...

Malicious code in payment-methods-component (npm)

The package payment-methods-component was found to contain malicious code...

Malicious code in op-payment-widget-v3 (npm)

The package op-payment-widget-v3 was found to contain malicious code...

MAL-2025-28257 Malicious code in op-payment-account (npm)

The package op-payment-account was found to contain malicious code...

MAL-2025-28944 Malicious code in payment_service_client (npm)

The package paymentserviceclient was found to contain malicious code...

MAL-2025-28258 Malicious code in op-payment-live-validation (npm)

The package op-payment-live-validation was found to contain malicious code...

MAL-2025-7984 Malicious code in @ginger-team/payment-form (npm)

The package @ginger-team/payment-form was found to contain malicious code...

MAL-2025-28943 Malicious code in payment-methods-component (npm)

The package payment-methods-component was found to contain malicious code...

MAL-2025-28942 Malicious code in paymaya-payment-js-sdk (npm)

The package paymaya-payment-js-sdk was found to contain malicious code...

PT-2025-33412 · Itsourcecode · Itsourcecode Online Tour/Travel Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tour and Travel Management System version 1.0 Description: A SQL injection issue exists in itsourcecode Online Tour and Travel Management System version 1.0. The manipulation of the payment type argument in the...

itsourcecode Online Tour and Travel Management 注入漏洞

itsourcecode Online Tour and Travel Management is itsourcecode open source an online tour and travel management system . An injection vulnerability exists in itsourcecode Online Tour and Travel Management version 1.0, which originates from a SQL injection due to incorrect manipulation of the...

PT-2025-43491

Name of the Vulnerable Software and Affected Versions versions prior to 2025-48612 Description An application on a work profile may be able to set the main user's default NFC payment setting due to improper input validation. This could lead to local escalation of privilege without requiring...

Mars: SQLi At `███████` via `theme_name`

A SQL injection vulnerability was discovered in a web application's theme selection endpoint through the "themename" parameter. Using SQLMap, the vulnerability was demonstrated to be exploitable through both error-based and time-based blind injection attacks against a MySQL database version 5.1 o...

Chinese Groups Stole 115 Million US Cards in 16-Month Smishing Campaign

A SecAlliance report reveals Chinese smishing syndicates compromised 115M US payment cards by bypassing MFA to exploit Apple Pay and Google Wallet...

CVE-2025-46018

CSC Pay Mobile App 2.19.4 fixed in version 2.20.0 contains a vulnerability allowing users to bypass payment authorization by disabling Bluetooth at a specific point during a transaction. This could result in unauthorized use of laundry services and potential financial loss...

CVE-2025-52327

SQL Injection vulnerability in Restaurant Order System 1.0 allows a local attacker to obtain sensitive information via the payment.php file...

CVE-2025-46018

CSC Pay Mobile App 2.19.4 fixed in version 2.20.0 contains a vulnerability allowing users to bypass payment authorization by disabling Bluetooth at a specific point during a transaction. This could result in unauthorized use of laundry services and potential financial loss...

CVE-2025-46018

CSC Pay Mobile App 2.19.4 fixed in version 2.20.0 contains a vulnerability allowing users to bypass payment authorization by disabling Bluetooth at a specific point during a transaction. This could result in unauthorized use of laundry services and potential financial loss...

Exploit for CVE-2025-46018

CVE-2025-46018 – CSC Pay Mobile App Payment Authentication Byp...

CVE-2025-52327

The Restaurant Order System version 1.0 is vulnerable to an SQL Injection vulnerability within the payment.php file. A local attacker can exploit this flaw to obtain sensitive information . No patch or newer version with a fix is currently available in the provided documentation. Exploitation det...