Malicious code in remote-pay-cloud-pos-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1be3a39c8e49e4f1f7cfd65472a31f91c8d5ed305ef6fa457563fb58432de98c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in remote-pay-cloud-nodejs-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c79c9016072594f69c2e51638411a976697aac06304e1d9a0ce7a430fe8d188 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5743 Malicious code in remote-pay-cloud-nodejs-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c79c9016072594f69c2e51638411a976697aac06304e1d9a0ce7a430fe8d188 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5744 Malicious code in remote-pay-cloud-pos-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1be3a39c8e49e4f1f7cfd65472a31f91c8d5ed305ef6fa457563fb58432de98c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in remote-pay-cloud-starter-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1988214db41a3d1764e3f6536359acbc08be5c669740b341aa43ace49cfe55c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5745 Malicious code in remote-pay-cloud-starter-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1988214db41a3d1764e3f6536359acbc08be5c669740b341aa43ace49cfe55c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5746 Malicious code in remote-pay-cloud-starter-example-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d542ce933de681b375aa1f4029845a353ad0f26d147dc9f4b3b01627cfa8d84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-41654

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php...

CVE-2021-41654

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php...

CVE-2021-41654

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php...

MAL-2022-7390 Malicious code in zilliqa-social-pay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a8400371d72c083526f030252ea8c15a37ae9aff8ef8b0ce4ad2bed20f27a26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zilliqa-social-pay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a8400371d72c083526f030252ea8c15a37ae9aff8ef8b0ce4ad2bed20f27a26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Experts Warn of Rise in ChromeLoader Malware Hijacking Users' Browsers

A malvertising threat is witnessing a new surge in activity since its emergence earlier this year. Dubbed ChromeLoader, the malware is a "pervasive and persistent browser hijacker that modifies its victims' browser settings and redirects user traffic to advertisement websites," Aedan Russell of R...

CVE-2021-26631

Improper input validation vulnerability in Mangboard commerce package could lead to occur for abnormal request. A remote attacker can exploit this vulnerability to manipulate the total order amount into a negative number and then pay for the order...

Merchandise Online Store SQL Injection Vulnerability (CNVD-2022-40279)

Merchandise Online Store is a merchandise online store system. A security vulnerability exists in Merchandise Online Store, which can be exploited by attackers to conduct SQL injection attacks via /vloggersmerch/classes/Master.php?f=payorder...

WeChat Pay Java SDK allows XXE

WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL...

GHSA-GQGV-2GP3-QQP3 WeChat Pay Java SDK allows XXE

WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL...

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. A security vulnerability exists in Merchandise Online Store, which can be exploited by attackers to conduct SQL injection attacks via /vloggersmerch/classes/Master.php?f=payorder...

NetDooka Framework Distributed via PrivateLoader Malware as Part of Pay-Per-Install Service

This report focuses on the components and infection chain ⁠of the NetDooka framework. Its scope ranges from the release of the first payload up until the release of the final RAT that is protected by a kernel driver...

Pay Slip PDF Generator System 1.0 SQL Injection Vulnerability

Pay Slip PDF Generator System version suffers from multiple remote SQL injection vulnerabilities that can lead to remote code execution. Title: Pay Slip PDF Generator System 1.0 Blind time SQLi To Rce Author: Hejap Zairy Vendor:...