CVE-2026-33661: Authentication Bypass by Spoofing

Pay is an open-source payment SDK extension package for various Chinese payment services. Prior to version 3.7.20, the verifywechatsign function in src/Functions.php unconditionally skips all signature verification when the PSR-7 request reports localhost as the host. An attacker can exploit this...

Threat Outbreak Alert: Fake Payment Information Email Messages on August 29, 2013

Medium Alert ID: 30604 First Published: 2013 August 29 19:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment notification for the recipient. The text in the message body attempts to persuade the recipient to op...