PT-2025-44746

Name of the Vulnerable Software and Affected Versions Campcodes School Fees Payment Management System version 1.0 Description A security flaw exists in Campcodes School Fees Payment Management System 1.0 related to the processing of the /ajax.php file. Manipulation of this file can lead to a SQL...

SourceCodester’s Best House Rental Management System has a SQL injection vulnerability

SourceCodester Best House Rental Management System is a SourceCodester open source house rental management system. SourceCodester Best House Rental Management System version 1.0 exists SQL injection vulnerability, the vulnerability stems from the function deletepayment in the file /adminclass.php...

PT-2025-44747

Name of the Vulnerable Software and Affected Versions SourceCodester Best House Rental Management System version 1.0 Description A weakness exists in the software that allows for SQL injection. The issue is located in the delete payment function within the /admin class.php file. Manipulation of t...

Malicious code in epic-web-payment-management (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57322b3ae061187188fbd722c1c0d7443dd93af100c00eb9259dc7f197a2fc59 The package epic-web-payment-management was found to contain malicious code...

MAL-2025-49214 Malicious code in epic-web-payment-management-iframe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20f662c0de8dbfab55fee3857ca8b147a09c10602058c221300b37267643ec34 The package epic-web-payment-management-iframe was found to contain malicious code...

MAL-2025-49215 Malicious code in epic-web-payment-management-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f2a637c997d0c062d35fd3313a767575ff60d8a80c64b305621e371c9af2525 The package epic-web-payment-management-sandbox was found to contain malicious code...

Malicious code in epic-web-payment-management-iframe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20f662c0de8dbfab55fee3857ca8b147a09c10602058c221300b37267643ec34 The package epic-web-payment-management-iframe was found to contain malicious code...

EUVD-2025-37079

Malicious code in epic-web-payment-management-iframe npm...

EUVD-2025-37080

Malicious code in epic-web-payment-management npm...

EUVD-2025-37078

Malicious code in epic-web-payment-management-sandbox npm...

Malicious code in epic-web-payment-management-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f2a637c997d0c062d35fd3313a767575ff60d8a80c64b305621e371c9af2525 The package epic-web-payment-management-sandbox was found to contain malicious code...

WordPress Simple Payment plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by ? in WordPress Plugin Simple Payment versions = 2.4.6...

WordPress Simple Payment plugin <= 2.4.6 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by ? in WordPress Plugin Simple Payment versions = 2.4.6...

CVE-2025-61080

A reflected Cross-Site Scripting XSS vulnerability has been identified in Clear2Pay Bank Visibility Application - Payment Execution 1.10.0.104 via the ID parameter in the URL...

CVE-2025-62516

Landlord Onboarding & Rental Signup introduces the landlord onboarding workflow and rental signup system for VivaTurbo Rentals & Property Services. In 2.0.0 and earlier, a vulnerability was identified in the TurboTenant property listing activation workflow that could allow unauthorized access to...

EUVD-2025-36545

A reflected Cross-Site Scripting XSS vulnerability has been identified in Clear2Pay Bank Visibility Application - Payment Execution 1.10.0.104 via the ID parameter in the URL...

CVE-2025-61080

A reflected Cross-Site Scripting XSS vulnerability has been identified in Clear2Pay Bank Visibility Application - Payment Execution 1.10.0.104 via the ID parameter in the URL...

Social Engineering People’s Credit Card Details

Good Wall Street Journal article on criminal gangs that scam people out of their credit card information: Your highway toll payment is now past due, one text warns. You have U.S. Postal Service fees to pay, another threatens. You owe the New York City Department of Finance for unpaid traffic...

PT-2025-44197

Name of the Vulnerable Software and Affected Versions Clear2Pay Bank Visibility Application - Payment Execution version 1.10.0.104 Description A reflected Cross-Site Scripting XSS issue exists. The issue is due to improper input validation in the application. Specifically, the ID parameter within...

CVE-2025-61080

A reflected Cross-Site Scripting XSS vulnerability has been identified in Clear2Pay Bank Visibility Application - Payment Execution 1.10.0.104 via the ID parameter in the URL...