Card readers used by popular companies like Square and PayPal have several security flaws that could result in customers getting majorly ripped off.