CVE-2025-13296 CSRF in Tekrom Technology's T-Soft E-Commerce

Cross-Site Request Forgery CSRF vulnerability in Tekrom Technology Inc. T-Soft E-Commerce allows Cross Site Request Forgery. This issue affects T-Soft E-Commerce: through 28112025...

CVE-2025-13296

Cross-Site Request Forgery CSRF vulnerability in Tekrom Technology Inc. T-Soft E-Commerce allows Cross Site Request Forgery. This issue affects T-Soft E-Commerce: through 28112025...

CVE-2025-13296

CVE-2025-13296 is a Cross-Site Request Forgery (CSRF) vulnerability in Tekrom Technology Inc. T-Soft E-Commerce. Affected versions are T-Soft E-Commerce up to 28112025 (inclusive). The CVSS 3.1 vector from the provided metrics is AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N with a base score of 5.4 (Mediu...

PT-2025-48440

Name of the Vulnerable Software and Affected Versions Tekrom Technology Inc. T-Soft E-Commerce versions through 28112025 Description A Cross-Site Request Forgery CSRF issue exists in Tekrom Technology Inc. T-Soft E-Commerce. This allows an attacker to perform actions on behalf of an authenticated...

Tekrom T-Soft E-Commerce 跨站请求伪造漏洞

Tekrom T-Soft E-Commerce is an e-commerce software from Tekrom. A cross-site request forgery vulnerability exists in Tekrom T-Soft E-Commerce 28112025 and earlier versions, which can be exploited to trick a logged-in user into performing an unintended action...

EUVD-2025-199707

Malicious code in ahmedsalemt npm...

MAL-2025-191471 Malicious code in ahmed_salem_t (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc278db8d9e1de9bc4e08bdc6bb126ee202e1f3035b69348d6f1ff66dd448e83 The package ahmedsalemt was found to contain malicious code. Source: ghsa-malware 2b2f4d2a3aa2f5b0a62127ad70f27d33c81f4d216a3fd4ff651f855cbb3b7f8e An...

Gallagher T-Series Reader 安全漏洞

The Gallagher T-Series Reader is a card reader in an access control system from Gallagher of New Zealand. A security vulnerability exists in the Gallagher T-Series Reader that stems from improper resource release and could lead to a denial of service attack...

CVE-2025-41069

Insecure Direct Object Reference IDOR vulnerability in DeporSite of T-INNOVA. This vulnerability allows an attacker to access or modify unauthorized resources by manipulating requests using the 'idUsuario' parameter in...

CVE-2016-15055

JVC VN-T IP-camera models firmware versions up to 2016-08-22 confirmed on the VN-T216VPRU model contain a directory traversal vulnerability in the checkcgi endpoint that accepts a user-controlled file parameter. An unauthenticated remote attacker can leverage this vulnerability to read arbitrary...

EUVD-2025-169288

Insecure Direct Object Reference IDOR vulnerability in DeporSite of T-INNOVA. This vulnerability allows an attacker to access or modify unauthorized resources by manipulating requests using the 'idUsuario' parameter in...

CVE-2025-41069

The vulnerability is an Insecure Direct Object Reference (IDOR) in DeporSite of T-INNOVA. An attacker can manipulate requests via the idUsuario parameter in /ajax/TInnova_v2/Formulario_Consentimiento/llamadaAjax/obtenerDatosConsentimientos to access or modify resources they should not. Documented...

CVE-2025-41069 Insecure Direct Object References (IDOR) in DeporSite of T-Innova DeporSite

Insecure Direct Object Reference IDOR vulnerability in DeporSite of T-INNOVA. This vulnerability allows an attacker to access or modify unauthorized resources by manipulating requests using the 'idUsuario' parameter in...

EUVD-2025-140128

Malicious code in min-te-t npm...

Malicious code in min-te-t (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9260e86996f0555471b69a68be4b4d5d1308c823e7b73cdc9b6a174e6d201e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141903

Malicious code in goodafiun-t-gif npm...

EUVD-2025-147237

Malicious code in uaragifa-t-safar npm...

EUVD-2025-150157

Malicious code in t-naughty-nubliesp npm...

Malicious code in guras-asia-t (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b1c8b4b6a595142fbaf255a932612159acf70fb1a9feaca12e2fa2f388180f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166655 Malicious code in t-naughty-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84e11e66fe284c711eb287567cf0d80a6b5ac9783fbec275c9c641319fe1c19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...