1026 matches found
CVE-2021-25527
Improper export of Android application components vulnerability in Samsung Pay India only prior to version 4.1.77 allows attacker to access Bill Pay and Recharge menu without authentication...
CVE-2021-25527
CVE-2021-25527 affects Samsung Pay in India prior to 4.1.77, where improper export of Android application components allows an attacker to access Bill Pay and Recharge menus without authentication. Root cause: components exported without proper access controls. Impact: affects UI workflows for bi...
CVE-2021-25525
Improper check or handling of exception conditions vulnerability in Samsung Pay US only prior to version 4.0.65 allows attacker to use NFC without user recognition...
CVE-2021-25525
Samsung Pay (US only) versions prior to 4.0.65 are affected by an improper check/handling of exception conditions, allowing an attacker to use NFC without user recognition. The root cause is described as improper exception handling. Impact is unauthorized NFC usage without user interaction. No ex...
Samsung Pay 安全漏洞
Samsung Pay is a mobile payment and digital wallet service from the South Korean company Samsung Samsung. It allows users to make payments using compatible cell phones and other Samsung-made devices. A security vulnerability exists in Samsung Pay India only versions prior to 4.1.77 that stems fro...
Samsung Pay 代码问题漏洞
Samsung Pay is a mobile payment and digital wallet service from the South Korean company Samsung Samsung. It allows users to make payments using compatible cell phones and other Samsung-made devices. A security vulnerability exists in versions of Samsung Pay prior to 4.0.65, which stems from the...
PT-2021-16717 · Samsung · Samsung Pay
Name of the Vulnerable Software and Affected Versions: Samsung Pay versions prior to 4.1.77 Description: The issue allows an attacker to access the Bill Pay and Recharge menu without authentication due to improper export of Android application components. This affects Samsung Pay in India...
The vulnerability of iOS operating systems, related to deficiencies in authentication procedures, allows a perpetrator to activate the Apple Pay transaction card on a locked or drained phone.
The vulnerability of iOS operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to enable the Apple Pay payment card on a locked or drained phone using a static 15-byte string...
The vulnerability of the MasterCard Tokenisation Service (MDES) relates to the exploitation of the vulnerabilities in the GPay/MasterCard pair. This allows attackers to clone transactions and perform payments beyond the limits of the Tap & Go service.
The vulnerability of the MasterCard Tokenisation Service MDES is related to the exploitation of a flaw in the GPay/MasterCard pair. Exploiting this vulnerability could allow an attacker to clone transactions and make payments beyond the limits of the Tap & Go service...
CVE-2021-26739
SQL Injection vulnerability in pay.php in millken doyocms 2.3, allows attackers to execute arbitrary code, via the attribute parameter...
CVE-2021-26739
SQL Injection vulnerability in pay.php in millken doyocms 2.3, allows attackers to execute arbitrary code, via the attribute parameter...
A week in security (Sept 27 – Oct 3)
Last week on Malwarebytes Labs Teaching cybersecurity skills to special needs children with Alana Robinson: Lock and Code S02E18 Phone screenshots accidentally leaked online by stalkerware-type company FoggyWeb, analysis of a Nobelium backdoor Instagram Kids put on hold Microsoft, CISA and NSA...
Help Might Finally Be on the Way to Fight SIM-Swap Attacks
Plus: A cybersecurity CEO arrest, an Apple Pay hack, and more of the week's top security news...
Apple Pay vulnerable to wireless pickpockets
Researchers have shown that it is possible for attackers to bypass an Apple iPhones lock screen to access payment services and make contactless transactions. The issue, which only applies to Apple Pay and Visa, is caused by the use of so-called magic bytes, a unique code used to unlock Apple Pay...
Apple Pay Can be Abused to Make Contactless Payments From Locked iPhones
Cybersecurity researchers have disclosed an unpatched flaw in Apple Pay that attackers could abuse to make an unauthorized Visa payment with a locked iPhone by taking advantage of the Express Travel mode set up in the device's wallet. "An attacker only needs a stolen, powered on iPhone. The...
Apple Pay with Visa Hacked to Make Payments via Unlocked iPhones
An attacker who steals a locked iPhone can use a stored Visa card to make contactless payments worth up to thousands of dollars without unlocking the phone, researchers are warning. The problem is due to unpatched vulnerabilities in both the Apple Pay and Visa systems, according to an academic te...
Apple Pay with Visa Hacked to Make Payments via Locked iPhones
An attacker who steals a locked iPhone can use a stored Visa card to make contactless payments worth up to thousands of dollars without unlocking the phone, researchers are warning. The problem is due to unpatched vulnerabilities in both the Apple Pay and Visa systems, according to an academic te...
pay-it-less.co.uk Cross Site Scripting vulnerability OBB-2150812
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
