Improper access control

Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance information over the lockscreen in specific condition...

CVE-2021-25333

Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance information over the lockscreen via scanning specific QR code...

CVE-2021-25333

The CVE-2021-25333 entry concerns Samsung Pay mini prior to version 4.0.14, where improper access control can let an unauthorized user obtain balance information by scanning a specific QR code on the lock screen. The affected product is Samsung Pay mini (mobile payment app). The underlying issue ...

CVE-2021-25332

CVE-2021-25332 concerns the Samsung Pay mini app, where improper access control prior to v4.0.14 allows unauthorized access to contacts information over the lockscreen under certain conditions. The connected documents corroborate that this is an information-disclosure vulnerability affecting Sams...

CVE-2021-25332

Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to contacts information over the lockscreen in specific condition...

CVE-2021-25331

CVE-2021-25331 concerns Samsung Pay mini prior to v4.0.14, where an improper access control allows unauthorized access to balance information on the lock screen under certain conditions. The description in connected documents confirms the affected product and the vulnerable behavior but does not ...

CVE-2021-25331

Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance information over the lockscreen in specific condition...

Samsung Pay mini 信息泄露漏洞

Samsung Pay mini is a mobile application from Samsung South Korea. It provides a mobile payment function. The Samsung Pay mini application prior to v4.0.14 suffers from an information disclosure vulnerability that allows access to contact information via the lock screen under certain circumstance...

Samsung Pay mini 信息泄露漏洞

Samsung Pay mini is a mobile application from Samsung South Korea. It provides a mobile payment function. An access control error vulnerability exists in the Samsung Pay mini application prior to v4.0.14, which allows unauthorized access, under certain circumstances, to balance information on the...

Samsung Pay mini 信息泄露漏洞

Samsung Pay mini is a mobile application from Samsung South Korea. It provides a mobile payment function. An information disclosure vulnerability exists in the Samsung Pay mini application prior to v4.0.14, which allows unauthorized users to access balance information by scanning a specific QR co...

CVE-2020-28199

best it Amazon Pay Plugin before 9.4.2 for Shopware exposes Sensitive Information to an Unauthorized Actor...

CVE-2020-28199

best it Amazon Pay Plugin before 9.4.2 for Shopware exposes Sensitive Information to an Unauthorized Actor...

Information disclosure

best it Amazon Pay Plugin before 9.4.2 for Shopware exposes Sensitive Information to an Unauthorized Actor...

CVE-2020-28199

Technical details (affected products/versions/root cause/exploitability) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2020-28199

best it Amazon Pay Plugin before 9.4.2 for Shopware exposes Sensitive Information to an Unauthorized Actor...

Amazon Pay Plugin Information Disclosure Vulnerability

Amazon Pay Plugin is an online payment plugin from Amazon.com, Inc. Amazon Pay Plugin before 9.4.2 suffers from an information disclosure vulnerability that originates from exposing sensitive information for Shopware...

Cyberpunk 2077 developer hit by ransomware

CD PROJEKT RED, the game developer behind Cyberpunk 2077, announced earlier on Twitter that it has fallen victim to a targeted ransomware attack. The company says it has backups for the affected systems and does not intend to pay the ransom. In their ransom note the attackers boast that they have...

WeChat Pay has a flawed logic vulnerability

WeChat is a free application launched by Tencent on January 21, 2011 to provide instant messaging services for smart terminals. A logic flaw vulnerability exists in WeChat Pay, which can be exploited by attackers to compromise confidentiality and integrity...

PT-2021-03: Apple Pay authentication and fields validation issues

Apple allows payments using Transport Card for amount0.00, without implementing proper authentication to ensure that only dedicated transport terminals were used for paying on locked or uncharged iPhones. Advisory status: October, 2021 - Vendor notification date Credits: Timur Yunusov...

pay-stubs.com Cross Site Scripting vulnerability OBB-1383365

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...