CVE-2025-3475 WEB-T - Moderately critical - Access bypass, Denial of service - SA-CONTRIB-2025-030

Allocation of Resources Without Limits or Throttling, Incorrect Authorization vulnerability in Drupal WEB-T allows Excessive Allocation, Content Spoofing.This issue affects WEB-T: from 0.0.0 before 1.1.0...

CVE-2025-3475: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling, Incorrect Authorization vulnerability in Drupal WEB-T allows Excessive Allocation, Content Spoofing.This issue affects WEB-T: from 0.0.0 before 1.1.0...

PT-2025-15837 · Drupal · Drupal Web-T

Name of the Vulnerable Software and Affected Versions: Drupal WEB-T versions 0.0.0 through 1.1.0 Description: The issue affects Drupal WEB-T, allowing excessive allocation and content spoofing due to allocation of resources without limits or throttling and incorrect authorization. Recommendations...

Drupal WEB-T 安全漏洞

Drupal WEB-T is a Drupal module used by the Drupal community to help users translate website content into multiple languages. A security vulnerability exists in Drupal WEB-T versions prior to 1.1.0 that stems from unlimited resource allocation and improper authorization, which could lead to conte...

Drupal WEB-T module < 1.1.0 - Unauthenticated Multiple Vulnerabilities vulnerability

Unauthenticated Multiple Vulnerabilities vulnerability discovered by Jan Kellermann jan kellermann in WordPress Module WEB-T versions 1.1.0...

Location, name, and photos of random kids shown to parents in child tracker mix up

Not one but several worried parents that tracked their children by using T-Mobile tracking devices suddenly found that they were looking at the location of random other children. And could not locate their own. T-Mobile sells a small GPS tracker called SyncUP, which can be used to track, among...

CVE-2025-2072: Improper Neutralization of Input During Web Page Generation

A Reflected Cross-Site Scripting XSS vulnerability has been discovered in FAST LTA Silent Brick WebUI, allowing attackers to inject malicious JavaScript code into web pages viewed by users. This issue arises when user-supplied input is improperly handled and reflected directly in the output of a...

RIP Mark Klein

2006 AT&T whistleblower Mark Klein has died...

U.S. Soldier Charged in AT&T Hack Searched “Can Hacking Be Treason”

A U.S. Army soldier who pleaded guilty last week to leaking phone records for high-ranking U.S. government officials searched online for non-extradition countries and for an answer to the question "can hacking be treason?" prosecutors in the case said Wednesday. The government disclosed the detai...

CVE-2025-0545

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...

CVE-2025-0545

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...

CVE-2025-0545

The CVE-2025-0545 vulnerability concerns Tekrom Technology’s T-Soft E-Commerce before v5, where improper neutralization of input during Web page generation enables Cross‑Site Scripting (XSS). The issue is tied to input handling in generating web pages, allowing injected scripts to run in the cont...

CVE-2025-0545 XSS in Tekrom Technology's T-Soft E-Commerce

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...

CVE-2025-0545 XSS in Tekrom Technology's T-Soft E-Commerce

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...

Tekrom T-Soft E-Commerce 跨站脚本漏洞

Tekrom T-Soft E-Commerce is an e-commerce software from Tekrom. A cross-site scripting vulnerability exists in Tekrom T-Soft E-Commerce versions prior to v5. The vulnerability stems from improper neutralization of inputs during Web page generation, resulting in cross-site scripting XSS...

PT-2025-7713

Name of the Vulnerable Software and Affected Versions T-Soft E-Commerce versions prior to 5 Description The issue affects T-Soft E-Commerce, allowing Cross-Site Scripting XSS due to improper neutralization of input during web page generation. Recommendations For versions prior to 5, update to...

CVE-2025-0545: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...

MAL-2025-1504 Malicious code in upm-ci-utils-tes-t (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3db67af7201afa722ce928a46979afb3ac375ebe370e32d0578fd2cca9119bc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-28132

The T-Soft E-Commerce 4 web application is susceptible to SQL injection SQLi attacks when authenticated as an admin or privileged user. This vulnerability allows attackers to access and manipulate the database through crafted requests. By exploiting this flaw, attackers can bypass authentication...

CVE-2023-31361: Uncontrolled Search Path Element

A DLL hijacking vulnerability in AMD Integrated Management Technology AIM-T Manageability Service could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...