PAVO Pay 信任管理问题漏洞

PAVO Pay is a mobile payment management platform from PAVO Turkey. A trust management issue vulnerability exists in PAVO Pay versions prior to 13.05.2025, which stems from the use of hard-coded credentials that could result in reading sensitive constants...

Malicious code in paymentapiplatformservice-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ac6842fa9d4708f9231bcffca06ec0806d5fe181a7e16ae1efe1cd6a37168c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Information leakage vulnerability in the smart payment platform of Guilin Jiapeng Information Technology Co. Ltd (CNVD-2021-39022)

Guilin Jiapeng Information Technology Co., Ltd. specializes in school fee system development. There is an information leakage vulnerability in Guilin Jiapeng Information Technology Limited smart fee payment platform. Attackers can use the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in the Campus Payment Platform of Beijing Dike Yuanwang Technology Co.

The Campus Payment Platform is developed by Beijing DIKE Farsighted Technology Co., Ltd. to solve various problems in payment of fees in colleges and universities, to reduce the workload of school financial managers, and to facilitate all kinds of fee-paying personnel both inside and outside the...

SQL Injection Vulnerability in the Payment Platform of Harbin Xinzhongxin Electronics Co.

Harbin Xinzhongxin Electronic Co., Ltd. is a payment platform solution provider. A SQL injection vulnerability exists in the payment platform of Harbin Xinzhongxin Electronics Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

Logic flaws and vulnerabilities in the campus fee payment platform of Beijing Dike Yuanwang Technology Co.

Ltd. specializes in the research, development and integration of one card system and campus payment platform. A logic flaw exists in the campus payment platform of Beijing Dike Yuanwang Technology Co., Ltd. that can be exploited by an attacker to reset a user's password and gain access to the...

Web skimmer phishes credit card data via rogue payment service platform

Heading into the holiday shopping season, we have been tracking increased activity from a threat group registering domains for skimming and phishing campaigns. While most of the campaigns implemented a web skimmer in the typical fashion—grabbing and exfiltrating data from a merchant's checkout pa...

XSS Vulnerability in the Campus Payment Platform of Beijing Dike Yuanwang Technology Co.

Ltd. specializes in the research, development and integration of one card system and campus payment platform. An XSS vulnerability exists in the Campus Payment Platform of Beijing Dike Yuanwang Technology Co. An attacker can exploit this vulnerability to obtain sensitive information...

SQL Injection Vulnerability in Payment Platform of Shanghai Fuzzy Wing Software Development Co.

Ltd. specializes in the development of software products and scientific and technological services in the field of Internet information technology. There is a SQL injection vulnerability in the payment platform of Shanghai Fuzzy Wing Computer Co., Ltd, which can be exploited by attackers to obtai...

Arbitrary File Read Vulnerability in ctcms

Chong Sheng Network Technology has developed Cscms Portal Content Management System, Ctcms Network Video Education Management System, Aggregate Payment, and a Multi-Merchant Entry Card Issuing Platform Management System. ctcms has an arbitrary file read vulnerability, an attacker can exploit the...

Weak Password Vulnerability in Chengdu Zhihui Campus Security Payment Platform

Campus Secure Payment Platform is an internet and mobile internet financial application platform for domestic universities. A weak password vulnerability exists in the Campus Pay platform. An attacker can exploit the vulnerability to obtain sensitive information and also perform unauthorized...