DeShang DSKMS Access Control Error Vulnerability

DeShang DSKMS is a professional content payment system from DeShang, China. An Access Control Error vulnerability exists in DeShang DSKMS prior to version 3.1.2, which stems from the file public/install.php that results in incorrect access control...

CVE-2023-6099

A vulnerability classified as critical has been found in Shenzhen Youkate Industrial Facial Love Cloud Payment System up to 1.0.55.0.0.1. This affects an unknown part of the file /SystemMng.ashx of the component Account Handler. The manipulation of the argument operatorRole with the input 00 lead...

Design/Logic Flaw

A vulnerability classified as critical has been found in Shenzhen Youkate Industrial Facial Love Cloud Payment System up to 1.0.55.0.0.1. This affects an unknown part of the file /SystemMng.ashx of the component Account Handler. The manipulation of the argument operatorRole with the input 00 lead...

CVE-2023-6099 Shenzhen Youkate Industrial Facial Love Cloud Payment System Account SystemMng.ashx privileges management

A vulnerability classified as critical has been found in Shenzhen Youkate Industrial Facial Love Cloud Payment System up to 1.0.55.0.0.1. This affects an unknown part of the file /SystemMng.ashx of the component Account Handler. The manipulation of the argument operatorRole with the input 00 lead...

CVE-2023-6099

The CVE-2023-6099 issue affects Shenzhen Youkate Industrial Facial Love Cloud Payment System up to version 1.0.55.0.0.1. The vulnerability is in the /SystemMng.ashx component of the Account Handler, where manipulating the operatorRole parameter with input 00 enables improper privilege management....

Shenzhen Youkate Industrial Facial Love Cloud Payment System Security Breach

Shenzhen Youkate Industrial Facial Love Cloud Payment System is a facial love cloud payment system from Shenzhen Youkate Industrial Shenzhen, China. A security vulnerability exists in Shenzhen Youkate Industrial Facial Love Cloud Payment System 1.0.55.0.0.1 and prior versions, which stems from an...

CVE-2023-6099: Improper Privilege Management

A vulnerability classified as critical has been found in Shenzhen Youkate Industrial Facial Love Cloud Payment System up to 1.0.55.0.0.1. This affects an unknown part of the file /SystemMng.ashx of the component Account Handler. The manipulation of the argument operatorRole with the input 00 lead...

Malvertising Campaign Targets Brazil's PIX Payment System with GoPIX Malware

The popularity of Brazil's PIX instant payment system has made it a lucrative target for threat actors looking to generate illicit profits using a new malware called GoPIX. Kaspersky, which has been tracking the active campaign since December 2022, said the attacks are pulled off using malicious...

Stealer for PIX payment system, new Lumar stealer and Rhysida ransomware

Introduction As a cybersecurity company, Kaspersky is constantly dealing with known and brand-new malware samples. As part of our crimeware reporting service, we provide our customers with technical reports on the evolution of existing crimeware families, as well as newly emerging ones. In this...

CVE-2023-38353

MiniTool Power Data Recovery version 11.6 and before contains an insecure in-app payment system that allows attackers to steal highly sensitive information through a man in the middle attack...

CVE-2023-38353

MiniTool Power Data Recovery version 11.6 and before contains an insecure in-app payment system that allows attackers to steal highly sensitive information through a man in the middle attack...

CVE-2023-4231

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cevik Informatics Online Payment System allows SQL Injection. This issue affects Online Payment System: before 4.09...

CVE-2023-4231

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cevik Informatics Online Payment System allows SQL Injection. This issue affects Online Payment System: before 4.09...

CVE-2023-4231

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cevik Informatics Online Payment System allows SQL Injection.This issue affects Online Payment System: before 4.09...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cevik Informatics Online Payment System allows SQL Injection.This issue affects Online Payment System: before 4.09...

CVE-2023-4231 SQLi in Cevik Informatics' Online Payment System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cevik Informatics Online Payment System allows SQL Injection. This issue affects Online Payment System: before 4.09...

CVE-2023-4231 SQLi in Cevik Informatics' Online Payment System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cevik Informatics Online Payment System allows SQL Injection. This issue affects Online Payment System: before 4.09...

CVE-2023-4231

CVE-2023-4231 affects Cevik Informatics Online Payment System (versions prior to 4.09). The root cause is improper neutralization of specific elements used in SQL commands, enabling an SQL Injection. CVSSv3.1 metrics (NETWORK, LOW ATTACK COMPLEXITY, NONE PRIVILEGES, UI NONE) yield a CRITICAL 9.8 ...

CVE-2023-4231: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cevik Informatics Online Payment System allows SQL Injection. This issue affects Online Payment System: before 4.09...

PT-2023-28312

Name of the Vulnerable Software and Affected Versions Cevik Informatics Online Payment System versions prior to 4.09 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...