CVE-2024-33963

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'id' in '/admin/modroom/index.php'...

CVE-2024-11205

The WPForms plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpformsisadminpage' function in versions starting from 1.8.4 up to, and including, 1.9.2.1. This makes it possible for authenticated attackers, with Subscriber-level acces...

CVE-2024-37564

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in PayPlus LTD PayPlus Payment Gateway.This issue affects PayPlus Payment Gateway: from n/a through 7.0.7...

CVE-2024-37459

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PayPlus LTD PayPlus Payment Gateway allows Reflected XSS.This issue affects PayPlus Payment Gateway: from n/a through 6.6.8...

CVE-2024-0705

The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 3.7.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

CVE-2024-53759

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Planet Studio ArCa Payment Gateway arca-payment-gateway allows Stored XSS.This issue affects ArCa Payment Gateway: from n/a through = 1.3.1...

Security Bulletin: Financial Transaction Manager for Digital Payments is impacted by multiple vulnerabilities in IBM Java SE

Summary Multiple vulnerabilities were addressed in Financial Transaction Manager 3.2.13 for Digital Payments, Corporate Payment Services and High Value Payments. Vulnerability Details CVEID:CVE-2024-21094 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component could allow...

Exploit for CVE-2025-22652

CVE-2025-22652 1️⃣ Component type WordPress plugin 2️...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Feb-2025 Release 1, which stems from an out-of-bounds write issue contained in the mPOS...

WordPress Paytm Payment Donation Plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Khang Duong Patchstack Alliance in WordPress Plugin Paytm Payment Donation versions = 2.3.3...

Malicious code in apple-payment (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa58dd69fc5ac0761d5c5ce00fb9447675f6da6b04207194721048413e2c0e36 Any computer that has this package installed or running should be considered...

MAL-2025-1012 Malicious code in apple-payment (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa58dd69fc5ac0761d5c5ce00fb9447675f6da6b04207194721048413e2c0e36 Any computer that has this package installed or running should be considered...

Malicious code in ton-payment-channels-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9e7497de28b982ff9a30a2d494d34eca9c190bba81a330f16ca8cdf7955e20e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1181 Malicious code in ton-payment-channels-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9e7497de28b982ff9a30a2d494d34eca9c190bba81a330f16ca8cdf7955e20e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sigma-payment (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cae3e39d6adad5c19ce159910927557c2e98660ac824828e0eb22a0dce296ae Any computer that has this package install...

MAL-2025-723 Malicious code in sigma-payment (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cae3e39d6adad5c19ce159910927557c2e98660ac824828e0eb22a0dce296ae Any computer that has this package install...

Casio and 16 Other Websites Hit by Double-Entry Web Skimming Attack

Researchers uncover a double-entry website skimming attack targeting Casio and 16 other sites. Learn how cybercriminals exploited vulnerabilities to steal sensitive payment data and evade detection...

CVE-2025-24635

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in integrationdevpaytm Paytm Payment Donation paytm-donation allows Reflected XSS.This issue affects Paytm Payment Donation: from n/a through = 2.3.1...

CVE-2025-24635

CVE-2025-24635 concerns the WordPress Paytm – Donation Plugin (versions n/a through 2.3.1). The underlying issue is an “Improper Neutralization of Input During Web Page Generation” that enables a Reflected Cross-Site Scripting (XSS) attack. Affected component: plugin code responsible for renderin...

WordPress plugin Paytm Payment Donation 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...