CVE-2025-30152 Sylius PayPal Plugin has an Order Manipulation Vulnerability after PayPal Checkout

The Syliud PayPal Plugin is the Sylius Core Team’s plugin for the PayPal Commerce Platform. Prior to 1.6.2, 1.7.2, and 2.0.2, a discovered vulnerability allows users to modify their shopping cart after completing the PayPal Checkout process and payment authorization. If a user initiates a PayPal...

PayPal Plugin 安全漏洞

PayPal Plugin is an open source plugin for the PayPal commerce platform from Sylius eCommerce. A security vulnerability exists in PayPal Plugin versions prior to 1.6.2, prior to 1.7.2, and prior to 2.0.2, which originates from a user being able to modify the shopping cart after completing the...

External Control of Assumed-Immutable Web Parameter

Overview sylius/paypal-plugin is a PayPal plugin for Sylius. Affected versions of this package are vulnerable to External Control of Assumed-Immutable Web Parameter. The user-input payment amount is not adequately confirmed to be the same between initial entry and payment completion, in...

CVE-2025-2278

Improper access control in temporary access requests and checkout requests endpoints in Devolutions Server 2024.3.13 and earlier allows an authenticated user to access information about these requests via a known request ID...

CVE-2025-2278

Improper access control in temporary access requests and checkout requests endpoints in Devolutions Server 2024.3.13 and earlier allows an authenticated user to access information about these requests via a known request ID...

CVE-2025-2278

Improper access control in temporary access requests and checkout requests endpoints in Devolutions Server 2024.3.13 and earlier allows an authenticated user to access information about these requests via a known request ID...

Devolutions Server 安全漏洞

Devolutions Server is an application from Devolutions Canada Inc. which provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server version 2024.3.13 and prior versions, which stems from improper access control in the Temporary...

Malicious code in wpcom-checkout (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1960 Malicious code in wpcom-checkout (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in meta-checkout (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1899 Malicious code in meta-checkout (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1857 Malicious code in instacart-checkout (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in epicagames-checkout (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1783 Malicious code in dropbox-checkout (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in dropbox-checkout (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1706 Malicious code in airbnb-checkout (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in airbnb-checkout (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2033 Malicious code in checkout-one-time-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b07c8dfeaf38da871c1e555b86d76046f4752bc738bf14ed15147cdadb6d92ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in checkout-one-time-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b07c8dfeaf38da871c1e555b86d76046f4752bc738bf14ed15147cdadb6d92ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paypal-checkout-integration-backend-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8978fb3635d1339256e1aa90eab3f76ba33bad36f9a2ffd70d1f6fc7d60ccca8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...