MAL-2026-10459 Malicious code in connectedmerchantsserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 834b886e34ea551223e9eeb30561267c93226eac960729a9a0ff6a06277c74cf The package's scripts.install lifecycle hook runs node index.js, which loads lib/core.js. That module collects the installer's OS username, hostname,...

Malicious code in collabs-merchants (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c742b9fe98460e2c9a2ab91847c6ff1f1b753187de7d52c7d160dd99021b6e58 The package collabs-merchants was found to contain malicious code...

MAL-2026-1694 Malicious code in collabs-merchants (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c742b9fe98460e2c9a2ab91847c6ff1f1b753187de7d52c7d160dd99021b6e58 The package collabs-merchants was found to contain malicious code...

EUVD-2025-5458

Malicious code in bioql PyPI...

CVE-2025-30152

The Syliud PayPal Plugin is the Sylius Core Team’s plugin for the PayPal Commerce Platform. Prior to 1.6.2, 1.7.2, and 2.0.2, a discovered vulnerability allows users to modify their shopping cart after completing the PayPal Checkout process and payment authorization. If a user initiates a PayPal...

CVE-2025-25326

An issue in Merchants Union Consumer Finance Company Limited Merchants Union Finance iOS 6.19.0 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-25326

An issue in Merchants Union Consumer Finance Company Limited Merchants Union Finance iOS 6.19.0 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-25326

An issue in Merchants Union Consumer Finance Company Limited Merchants Union Finance iOS 6.19.0 allows attackers to access sensitive user information via supplying a crafted link...

PT-2025-8967

Name of the Vulnerable Software and Affected Versions Merchants Union Finance version 6.19.0 Description An issue in Merchants Union Finance allows attackers to access sensitive user information via supplying a crafted link. Recommendations For version 6.19.0, update to a newer version that...

CVE-2025-25326

A security vulnerability exists in Merchants Union Finance (specifically the iOS version 6.19.0 ) due to the improper neutralization of encoded URI schemes in a web page. Attackers can exploit this by supplying a crafted link to access sensitive user information . Remediation involves updating th...

CVE-2025-25326

An issue in Merchants Union Consumer Finance Company Limited Merchants Union Finance iOS 6.19.0 allows attackers to access sensitive user information via supplying a crafted link...

MUCFC Merchants Union Finance 安全漏洞

MUCFC Merchants Union Finance MUCFC is a credit loan installment borrowing platform from China Merchants Union MUCFC Corporation. A security vulnerability exists in MUCFC Merchants Union Finance iOS version 6.19.0, which originates from a specially crafted link that can access sensitive user...

CVE-2025-25326: Improper Neutralization of Encoded URI Schemes in a Web Page

An issue in Merchants Union Consumer Finance Company Limited Merchants Union Finance iOS 6.19.0 allows attackers to access sensitive user information via supplying a crafted link...

Unspecified Vulnerability in Adobe Commerce (CNVD-2024-19007)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A security vulnerability exists in Adobe Commerce that can be exploited by an attacker with elevated privileges to potentially abuse the vulnerability t...

The great divide of PCI DSS v4.0: Merchants, are you ready?

Are you ready for PCI DSS 4.0? Its vital to understand the changes to prepare properly and avoid costly delays in achieving compliance...

merchants-manor.cornwallhotel.net Cross Site Scripting vulnerability OBB-3437996

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

merchants-crown.best-hotelsprague.com Cross Site Scripting vulnerability OBB-3437995

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

merchants-avenue.best-hotelsprague.com Cross Site Scripting vulnerability OBB-3437994

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

merchants-almshouse.bristolhotels24.com Cross Site Scripting vulnerability OBB-3437993

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Paragon Solutions Spyware: Graphite

Paragon Solutions is yet another Israeli spyware company. Their product is called "Graphite," and is a lot like NSO Groups Pegasus. And Paragon is working with what seems to be US approval: American approval, even if indirect, has been at the heart of Paragons strategy. The company sought a list ...