Cevik Informatics Online Payment System SQL Injection Vulnerability

Cevik Informatics Online Payment System is an online payment system from Cevik Informatics. A SQL injection vulnerability exists in Cevik Informatics Online Payment System versions prior to 4.09, which stems from incorrect neutralization of specific elements used by the system...

PT-2023-26380 · Minitool · Minitool Power Data Recovery

Name of the Vulnerable Software and Affected Versions: MiniTool Power Data Recovery versions 11.6 and before MiniTool Power Data Recovery version 11.5 Description: The issue concerns an insecure in-app payment system in MiniTool Power Data Recovery, which can be exploited through a...

Hackers Exploit Flaws in Revolut’s Payment System, Stealing $20 Million

By Waqas Revolut has not yet issued an official statement regarding the cyber attack. This is a post from HackRead.com Read the original post: Hackers Exploit Flaws in Revoluts Payment System, Stealing $20 Million...

Revolut Faces $20 Million Loss as Attackers Exploit Payment System Weakness

Malicious actors exploited an unknown flaw in Revolut's payment systems to steal more than $20 million of the company's funds in early 2022. The development was reported by the Financial Times, citing multiple unnamed sources with knowledge of the incident. The breach has not been disclosed...

Prilex: the pricey prickle credit card complex

Prilex is a Brazilian threat actor that has evolved out of ATM-focused malware into modular point-of-sale malware. The group was behind one of the largest attacks on ATMs in the country, infecting and jackpotting more than 1,000 machines, while also cloning in excess of 28,000 credit cards that...

Calling in the ransomware negotiator, with Kurtis Minder: Lock and Code S03E20

Ransomware can send any company into crisis. Immediately following an attack, the notoriously disruptive malware can spread across networks and machines, locking up important files and rendering vital data almost useless for all employees. As we learned in a previous episode of Lock and Code, a...

Automattic: IDOR able to buy a plan with lesser fee

Summary IDOR allows you to pay with the same amount but different currency. For example, paying 35000$ instead of 35000€ Steps To Reproduce 1. Go to https://account.mailpoet.com/ and select a plan 2. For example I have selected this plan; https://account.mailpoet.com/orders/new?p=214 3. Now, as y...

Student Registration and Fee Payment System SQL Injection Vulnerability

Student Registration and Fee Payment System is a student registration and fee payment management system. student registration and fee payment system v1.0 is vulnerable to SQL injection, which originates from /scms/student. php is missing SQL data filtering and escaping. An attacker could use this...

CVE-2022-31908

Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php...

CVE-2022-31908: Improper Neutralization of Special Elements used in an SQL Command

Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php...

PT-2022-20982

Name of the Vulnerable Software and Affected Versions Student Registration and Fee Payment System version 1.0 Description The issue concerns a SQL Injection vulnerability via the /scms/student.php endpoint. This allows for potential exploitation. Recommendations For Student Registration and Fee...

CVE-2021-4031

Syltek application before its 10.22.00 version, does not correctly check that a product ID has a valid payment associated to it. This could allow an attacker to forge a request and bypass the payment system by marking items as payed without any verification...

Cross site request forgery (csrf)

Syltek application before its 10.22.00 version, does not correctly check that a product ID has a valid payment associated to it. This could allow an attacker to forge a request and bypass the payment system by marking items as payed without any verification...

CVE-2021-4031: Insufficient Verification of Data Authenticity

Syltek application before its 10.22.00 version, does not correctly check that a product ID has a valid payment associated to it. This could allow an attacker to forge a request and bypass the payment system by marking items as payed without any verification...

PT-2022-11213

Name of the Vulnerable Software and Affected Versions Syltek application versions prior to 10.22.00 Description The issue arises from the application's failure to correctly verify that a product ID has a valid payment associated with it. This could allow an attacker to forge a request, bypassing...

OpenWay Group WAY4 ACS security vulnerability

OpenWay Group Way4 Acs is a digital payment solution from OpenWay Group Belgium. It is used for account management, digital wallets, card issuance, acquiring, interchange, e-commerce gateways and omni-channel digital banking. A security vulnerability exists in OpenWay Group WAY4 ACS prior to...

Hackers Targeting Brazil's PIX Payment System to Drain Users' Bank Accounts

Two newly discovered malicious Android applications on Google Play Store have been used to target users of Brazil's instant payment ecosystem in a likely attempt to lure victims into fraudulently transferring their entire account balances into another bank account under cybercriminals' control...

Arbitrary File Read Vulnerability in DSKMS

DSKMS is a professional content payment system tailored for enterprise customers by Changsha Deshaun Network Technology Co. DSKMS suffers from an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

Payments paradigm shift

Crypto assets have been around for over a decade, and with the recent Coinbase IPO, we believe we are well past the point of calling this a "passing fad." In fact, we believe that crypto assets -- particularly bitcoin -- have now passed the tipping point from being considered an unconventional...

Information leakage vulnerability in KTO's fully intelligent parking video payment system

Xiamen Corto Communication Technology Co., Ltd Corto Parking is a professional intelligent parking value operator, providing intelligent parking services to customers. There is an information leakage vulnerability in Kerto's fully intelligent parking video charging system. Attackers can utilize t...