MAL-2025-22568 Malicious code in honeydew-car-qi7n (npm)

The package honeydew-car-qi7n was found to contain malicious code...

MAL-2025-34618 Malicious code in teak-car-tte2 (npm)

The package teak-car-tte2 was found to contain malicious code...

Malicious code in car-shack-phk6 (npm)

The package car-shack-phk6 was found to contain malicious code...

CVE-2025-54691: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in Stylemix Motors motors-car-dealership-classified-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a through = 1.4.80...

Online portal exposed car and personal data, allowed anyone to remotely unlock cars

A carmaker’s online dealership portal has been found leaking the private information and vehicle data of its customers. This also meant that anyone with access could remotely break into a car. Researcher Eaton Zveare shared his discovery with TechCrunch. Although he said he has chosen not to...

Kenwood DMX958XR 操作系统命令注入漏洞

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. An operating system command injection vulnerability exists in the Kenwood DMX958XR ReadMVGImage function, which can be exploited by an attacker to execute code in a root context...

Kenwood DMX958XR 安全漏洞

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a stack buffer overflow vulnerability that stems from JKRadioService not properly validating the length of user-supplied data, which can be exploited by an attacker to execute code in the root...

Kenwood DMX958XR 操作系统命令注入漏洞

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...

Kenwood DMX958XR 操作系统命令注入漏洞

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...

Kenwood DMX958XR 操作系统命令注入漏洞

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...

Kenwood DMX958XR 操作系统命令注入漏洞

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...

Kenwood DMX958XR 操作系统命令注入漏洞

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...

CVE-2025-8337

A vulnerability, which was classified as problematic, has been found in code-projects Simple Car Rental System 1.0. This issue affects some unknown processing of the file /admin/addvehicles.php. The manipulation of the argument carname leads to cross site scripting. The attack may be initiated...

CVE-2025-8335

A vulnerability classified as problematic has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used...

Car Washing Management System Session Hijacking Vulnerability

Car Washing Management System is a car wash management system. Car Washing Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /doctor/change-password.php, no details of the vulnerability are provided at this time...

The vulnerability of the personalizacao_selecao.php web manager of WeGIA allows attackers to perform cross-site scripting attacks.

The vulnerability of the personalizacaoselecao.php web handler of the WeGIA browser is related to the lack of measures taken to protect the website structure when processing the nomecar parameter. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks XSS...

CVE-2025-8337

A vulnerability, which was classified as problematic, has been found in code-projects Simple Car Rental System 1.0. This issue affects some unknown processing of the file /admin/addvehicles.php. The manipulation of the argument carname leads to cross site scripting. The attack may be initiated...

CVE-2025-8337

A vulnerability, which was classified as problematic, has been found in code-projects Simple Car Rental System 1.0. This issue affects some unknown processing of the file /admin/addvehicles.php. The manipulation of the argument carname leads to cross site scripting. The attack may be initiated...

CVE-2025-8337 code-projects Simple Car Rental System add_vehicles.php cross site scripting

A vulnerability, which was classified as problematic, has been found in code-projects Simple Car Rental System 1.0. This issue affects some unknown processing of the file /admin/addvehicles.php. The manipulation of the argument carname leads to cross site scripting. The attack may be initiated...

CVE-2025-8337

CVE-2025-8337 affects Code-Projects Simple Car Rental System 1.0. The vulnerability is in the file /admin/add_vehicles.php where manipulation of the car_name argument can lead to a cross-site scripting (XSS) vulnerability. The attack can be initiated remotely and exploits have been publicly discl...