2896 matches found
MAL-2025-43865 Malicious code in column-car-vast (npm)
The package column-car-vast was found to contain malicious code...
Malicious code in column-car-vast (npm)
The package column-car-vast was found to contain malicious code...
Malicious code in fortnite-free-gi-ft-car-ds-2023 (npm)
The package fortnite-free-gi-ft-car-ds-2023 was found to contain malicious code...
MAL-2025-44291 Malicious code in fortnite-free-gi-ft-car-ds-2023 (npm)
The package fortnite-free-gi-ft-car-ds-2023 was found to contain malicious code...
CVE-2025-9721
A flaw has been found in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /module/FormulaMedia/edit. This manipulation of the argument nome/formulaMedia causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publish...
CVE-2025-9650 yeqifu carRental AppFileUtils.java removeFileByPath path traversal
A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. This affects the function removeFileByPath of the file src/main/java/com/yeqifu/sys/utils/AppFileUtils.java. The manipulation of the argument carimg leads to path traversal. The attack is possible t...
PT-2025-35218
Name of the Vulnerable Software and Affected Versions: yeqifu carRental versions prior to 3fabb7eae93d209426638863980301d6f99866b3 Description: A path traversal issue exists in the removeFileByPath function within the src/main/java/com/yeqifu/sys/utils/AppFileUtils.java file. The manipulation of...
Qilin Ransomware Gang Claims 4TB Data Breach at Nissan CBI
Qilin ransomware claims a 4TB data breach at Nissan CBI, leaking car design files, financial data, 3D models,…...
A week in security (August 11 – August 17)
Last week on Malwarebytes Labs: Italian hotels breached for tens of thousands of scanned IDs National Public Data returns after massive Social Security Number leak Romance scammers in Ghana charged with more than $100 million in theft Netflix scammers target jobseekers to trick them into handing...
Kenwood DMX958XR Command Injection Vulnerability (CNVD-2025-20426)
The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...
Kenwood DMX958XR Command Injection Vulnerability (CNVD-2025-20424)
The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...
Kenwood DMX958XR Command Injection Vulnerability (CNVD-2025-20297)
The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...
Kenwood DMX958XR libSystemLib Function OS Command Injection Vulnerability
The Kenwood DMX958XR is an in-car infotainment system from Kenwood. An operating system command injection vulnerability exists in the Kenwood DMX958XR libSystemLib function, which can be exploited by an attacker to execute code in a root context...
Kenwood DMX958XR Command Injection Vulnerability (CNVD-2025-20292)
The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...
Malicious code in alpha-car-wke3 (npm)
The package alpha-car-wke3 was found to contain malicious code...
Malicious code in bark-car-6zyz (npm)
The package bark-car-6zyz was found to contain malicious code...
Malicious code in car-iceberg-vf0g (npm)
The package car-iceberg-vf0g was found to contain malicious code...
Malicious code in car-itsur-s22120188 (npm)
The package car-itsur-s22120188 was found to contain malicious code...