Malicious code in paymaya-payment-js-sdk (npm)

The package paymaya-payment-js-sdk was found to contain malicious code...

MAL-2025-32787 Malicious code in schibsted-payment-sdk (npm)

The package schibsted-payment-sdk was found to contain malicious code...

MAL-2025-28944 Malicious code in payment_service_client (npm)

The package paymentserviceclient was found to contain malicious code...

Malicious code in op-payment-widget-v3 (npm)

The package op-payment-widget-v3 was found to contain malicious code...

Malicious code in op-payment-live-validation (npm)

The package op-payment-live-validation was found to contain malicious code...

MAL-2025-28258 Malicious code in op-payment-live-validation (npm)

The package op-payment-live-validation was found to contain malicious code...

MAL-2025-28259 Malicious code in op-payment-widget-v3 (npm)

The package op-payment-widget-v3 was found to contain malicious code...

MAL-2025-7984 Malicious code in @ginger-team/payment-form (npm)

The package @ginger-team/payment-form was found to contain malicious code...

MAL-2025-28943 Malicious code in payment-methods-component (npm)

The package payment-methods-component was found to contain malicious code...

MAL-2025-28942 Malicious code in paymaya-payment-js-sdk (npm)

The package paymaya-payment-js-sdk was found to contain malicious code...

Malicious code in payment-methods-component (npm)

The package payment-methods-component was found to contain malicious code...

Malicious code in op-payment-account (npm)

The package op-payment-account was found to contain malicious code...

MAL-2025-28257 Malicious code in op-payment-account (npm)

The package op-payment-account was found to contain malicious code...

Malicious code in schibsted-payment-sdk (npm)

The package schibsted-payment-sdk was found to contain malicious code...

PT-2025-33412 · Itsourcecode · Itsourcecode Online Tour/Travel Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tour and Travel Management System version 1.0 Description: A SQL injection issue exists in itsourcecode Online Tour and Travel Management System version 1.0. The manipulation of the payment type argument in the...

Itsourcecode Online Tour and Travel Management Injection Vulnerability

itsourcecode Online Tour and Travel Management is itsourcecode open source an online tour and travel management system . An injection vulnerability exists in itsourcecode Online Tour and Travel Management version 1.0, which originates from a SQL injection due to incorrect manipulation of the...

PT-2025-43491

Name of the Vulnerable Software and Affected Versions versions prior to 2025-48612 Description An application on a work profile may be able to set the main user's default NFC payment setting due to improper input validation. This could lead to local escalation of privilege without requiring...

Mars: SQLi At `███████` via `theme_name`

A SQL injection vulnerability was discovered in a web application's theme selection endpoint through the "themename" parameter. Using SQLMap, the vulnerability was demonstrated to be exploitable through both error-based and time-based blind injection attacks against a MySQL database version 5.1 o...

Chinese Groups Stole 115 Million US Cards in 16-Month Smishing Campaign

A SecAlliance report reveals Chinese smishing syndicates compromised 115M US payment cards by bypassing MFA to exploit Apple Pay and Google Wallet...

CVE-2025-46018

CSC Pay Mobile App 2.19.4 fixed in version 2.20.0 contains a vulnerability allowing users to bypass payment authorization by disabling Bluetooth at a specific point during a transaction. This could result in unauthorized use of laundry services and potential financial loss...