CVE-2025-67928 WordPress Automotive Listings plugin <= 18.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in themesuite Automotive Listings automotive allows Blind SQL Injection.This issue affects Automotive Listings: from n/a through = 18.6...

CVE-2025-67928 WordPress Automotive Listings plugin <= 18.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in themesuite Automotive Listings automotive allows Blind SQL Injection.This issue affects Automotive Listings: from n/a through = 18.6...

CVE-2025-67928

CVE-2025-67928 affects the Automotive Listings plugin/theme. It is an SQL Injection vulnerability (improper neutralization of input) allowing a blind SQL injection in Automotive Listings, potentially impacting the product up to version 18.6. The CVSS 3.1 vector indicates Network attack, with high...

PT-2026-1904

Name of the Vulnerable Software and Affected Versions themesuite Automotive Listings versions n/a through 18.6 Description An issue exists in themesuite Automotive Listings that allows for Blind SQL Injection due to Improper Neutralization of Special Elements used in an SQL Command. This allows a...

WordPress plugin Automotive Listings 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

CVE-2025-47393

CVE-2025-47393 involves memory corruption when accessing resources in a kernel driver. Multiple feeds (NVD, Red Hat, CVE lists, CIRCL, CNNVD) reiterate the issue as memory corruption in kernel driver access, with Qualcomm chipsets repeatedly cited in related items. The available data list an atta...

CVE-2025-47393 Improper Validation of Array Index in Automotive Linux OS

Memory corruption when accessing resources in kernel driver...

CVE-2025-47393 Improper Validation of Array Index in Automotive Linux OS

Memory corruption when accessing resources in kernel driver...

CVE-2025-47345 Reusing a Nonce, Key Pair in Encryption in Automotive Platform

Cryptographic issue may occur while encrypting license data...

CVE-2025-47345 Reusing a Nonce, Key Pair in Encryption in Automotive Platform

Cryptographic issue may occur while encrypting license data...

CVE-2025-47345

Technical details (affected products, versions, root cause, fixes) are not publicly provided in the connected documents. Monitor for updates from Qualcomm and related security bulletins.

WordPress Automotive Listings plugin <= 18.6 - SQL Injection vulnerability

SQL Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Automotive Listings versions = 18.6...

Android Automotive OS Update Bulletin—January 2026Stay organized with collectionsSave and categorize content based on your preferences.

The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2026-01-05 or later from the January 2026 Android Security Bulletin in addition to all issues in thi...

CVE-2025-47322

CVE-2025-47322 involves a memory corruption (use-after-free) flaw in IOCTL handling to set mode in Qualcomm embedded platform firmware/ MSM kernel components. Affected: Qualcomm embedded platform firmware; root cause: use-after-free leading to memory corruption. Impact: potential arbitrary code e...

CVE-2025-47322 Use After Free in Automotive Linux OS

Memory corruption while handling IOCTL calls to set mode...

CVE-2025-47322 Use After Free in Automotive Linux OS

Memory corruption while handling IOCTL calls to set mode...

Android Automotive OS Update Bulletin—December 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2025-12-05 or later from the December 2025 Android Security Bulletin in addition to all issues in th...

RampoNN: A Reachability-Guided System Falsification for Efficient Cyber-Kinetic Vulnerability Detection

Detecting kinetic vulnerabilities in Cyber-Physical Systems CPS, vulnerabilities in control code that can precipitate hazardous physical consequences, is a critical challenge. This task is complicated by the need to analyze the intricate coupling between complex software behavior and the system's...

EdgeStepper Implant Reroutes DNS Queries to Deploy Malware via Hijacked Software Updates

The threat actor known as PlushDaemon has been observed using a previously undocumented Go-based network backdoor codenamed EdgeStepper to facilitate adversary-in-the-middle AitM attacks. EdgeStepper "redirects all DNS queries to an external, malicious hijacking node, effectively rerouting the...

Towards a Formal Verification of Secure Vehicle Software Updates

With the rise of software-defined vehicles SDVs, where software governs most vehicle functions alongside enhanced connectivity, the need for secure software updates has become increasingly critical. Software vulnerabilities can severely impact safety, the economy, and society. In response to this...