Romanian Man Faces Up to 30 Years in US Prison Over Vishing Scams

Romanian national Gavril Sandu faces up to 30 years in a US prison after extradition over a VOIP vishing and fake debit card fraud scheme...

CVE-2026-0942 Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit <= 5.1.5 - Missing Authorization to Unauthenticated Rede Order Logs Deletion

The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clearOrderLogs function in all versions up to, and including, 5.1.5. This makes it possible for unauthenticated...

EUVD-2024-34550

Malicious code in bioql PyPI...

EUVD-2024-34545

Malicious code in bioql PyPI...

Malicious code in test-mlw2-emote-debit-loner-teary (npm)

The package test-mlw2-emote-debit-loner-teary was found to contain malicious code...

MAL-2025-8969 Malicious code in @malware-test-stuns-debit-lisle-spook/test-mlw3-stuns-debit-lisle-spook (npm)

The package @malware-test-stuns-debit-lisle-spook/test-mlw3-stuns-debit-lisle-spook was found to contain malicious code...

Malicious code in @malware-test-emote-debit-loner-teary/test-mlw3-emote-debit-loner-teary (npm)

The package @malware-test-emote-debit-loner-teary/test-mlw3-emote-debit-loner-teary was found to contain malicious code...

MAL-2025-35271 Malicious code in test-mlw2-emote-debit-loner-teary (npm)

The package test-mlw2-emote-debit-loner-teary was found to contain malicious code...

MAL-2025-8623 Malicious code in @malware-test-emote-debit-loner-teary/test-mlw3-emote-debit-loner-teary (npm)

The package @malware-test-emote-debit-loner-teary/test-mlw3-emote-debit-loner-teary was found to contain malicious code...

MAL-2025-34780 Malicious code in test-mlw1-emote-debit-loner-teary (npm)

The package test-mlw1-emote-debit-loner-teary was found to contain malicious code...

CVE-2024-33959

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'categ' in...

CVE-2024-33961

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'code' in...

编号撤回

RedSys 3DSecure is a payment security technology from RedSys, Spain, designed to improve the security of online transactions, especially during credit and debit card payments. This CVE number has been withdrawn...

CVE-2024-33974

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'Users in '/report/printlogs.php'...

CVE-2024-33969

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'id' in...

CVE-2024-33970

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'studid' in...

CVE-2024-33971

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'username' in '/login.php' parameter...

CVE-2024-33971

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'username' in '/login.php' parameter...

CVE-2024-33972

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'events' in '/report/eventprint.php'...

CVE-2024-33973

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'Attendance' and 'YearLevel' in...