EUVD-2025-23286

Malicious code in bioql PyPI...

EUVD-2022-48273

Malicious code in bioql PyPI...

EUVD-2022-35053

Malicious code in bioql PyPI...

EUVD-2023-53763

Malicious code in bioql PyPI...

CVE-2025-11070

A vulnerability was identified in Projectworlds Online Shopping System 1.0. This affects an unknown part of the file /store/cartadd.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used...

CVE-2025-11070 Projectworlds Online Shopping System cart_add.php sql injection

A vulnerability was identified in Projectworlds Online Shopping System 1.0. This affects an unknown part of the file /store/cartadd.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used...

CVE-2025-60171

Cross-Site Request Forgery CSRF vulnerability in yourplugins Conditional Cart Messages for WooCommerce - YourPlugins.com yourplugins-wc-conditional-cart-notices allows Stored XSS.This issue affects Conditional Cart Messages for WooCommerce - YourPlugins.com: from n/a through = 1.2.10...

Projectworlds Online Shopping System SQL注入漏洞

Projectworlds Online Shopping System is an online shopping system from the Austrian company Projectworlds. A SQL injection vulnerability exists in Projectworlds Online Shopping System version 1.0, which stems from a misuse of the parameter ID in the file /store/cartadd.php, which could lead to a...

PT-2025-39735

Name of the Vulnerable Software and Affected Versions Projectworlds Online Shopping System version 1.0 Description A flaw exists in Projectworlds Online Shopping System that allows for SQL injection. This issue affects an unknown part of the /store/cart add.php file. Manipulation of the ID argume...

MAL-2025-47661 Malicious code in example-custom-cart-method (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in example-custom-cart-method (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-60171 WordPress Conditional Cart Messages for WooCommerce – YourPlugins.com Plugin <= 1.2.10 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in yourplugins Conditional Cart Messages for WooCommerce – YourPlugins.com yourplugins-wc-conditional-cart-notices allows Stored XSS.This issue affects Conditional Cart Messages for WooCommerce – YourPlugins.com: from n/a through = 1.2.10...

CVE-2025-60171

CVE-2025-60171 is a CSRF vulnerability in Conditional Cart Messages for WooCommerce – YourPlugins.com that enables Stored XSS in versions up to 1.2.10 (affected: n/a–1.2.10). CVSSv3.1 base score 7.1 (HIGH); Vectors: NETWORK; privileges required: NONE; user interaction: REQUIRED; impacts: Confiden...

CVE-2025-29157

An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via accessing a non-existent endpoint/cart, the server returns a 404-error page exposing sensitive information including the Servlet name default and server version...

WordPress plugin Conditional Cart Messages for WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that provides the ability to host a personal blog site on a PHP and MySQL based server. A cross-site request...

PT-2025-39612

Name of the Vulnerable Software and Affected Versions Conditional Cart Messages for WooCommerce versions through 1.2.10 Description A Cross-Site Request Forgery CSRF issue exists that also allows Stored Cross-Site Scripting XSS. The issue is present in yourplugins Conditional Cart Messages for...

CVE-2025-29157

An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via accessing a non-existent endpoint/cart, the server returns a 404-error page exposing sensitive information including the Servlet name default and server version...

CVE-2025-29157

An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via accessing a non-existent endpoint/cart, the server returns a 404-error page exposing sensitive information including the Servlet name default and server version...

CVE-2025-57407

A stored cross-site scripting XSS vulnerability in the Admin Log Viewer of S-Cart =10.0.3 allows a remote authenticated attacker to inject arbitrary web script or HTML via a crafted User-Agent header. The script is executed in an administrator's browser when they view the security log page, which...

CVE-2025-29157

An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via accessing a non-existent endpoint/cart, the server returns a 404-error page exposing sensitive information including the Servlet name default and server version...