EUVD-2023-48111

Malicious code in bioql PyPI...

EUVD-2023-54386

Malicious code in bioql PyPI...

EUVD-2023-30841

Malicious code in bioql PyPI...

EUVD-2024-37954

Malicious code in bioql PyPI...

EUVD-2021-8660

Malicious code in bioql PyPI...

EUVD-2022-0658

Malicious code in bioql PyPI...

EUVD-2023-48100

Malicious code in bioql PyPI...

EUVD-2024-2124

Malicious code in bioql PyPI...

EUVD-2024-37957

Malicious code in bioql PyPI...

CVE-2024-57494

Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the kw parameter...

Yoshop 安全漏洞

Yoshop is a Chinese yiovo open source e-commerce system. A security vulnerability exists in Yoshop version 2.0, which originates from unvalidated goodsIds parameter and may lead to SQL injection attack...

CVE-2024-57494

Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the kw parameter...

CVE-2024-57494

The Neto E-Commerce CMS (versions 6.313.0 through 6.3115 ) is susceptible to a Cross-Site Scripting (XSS) vulnerability. A remote attacker can exploit the kw parameter to potentially escalate privileges. To mitigate this risk, it is recommended to update Neto E-Commerce CMS to a version later tha...

CVE-2024-57494

Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the kw parameter...

Neto E-Commerce CMS 安全漏洞

Neto E-Commerce CMS is an e-commerce content management system from Neto Australia. A security vulnerability exists in Neto E-Commerce CMS versions 6.313.0 through 6.3115, which stems from the presence of cross-site scripting in the kw parameter, which could lead to elevation of privilege...

PT-2025-40282

Name of the Vulnerable Software and Affected Versions Neto E-Commerce CMS versions 6.313.0 through 6.3115 Description A Cross Site Scripting issue exists in Neto E-Commerce CMS. This allows a remote attacker to potentially escalate privileges. The issue is related to the kw parameter...

CVE-2024-57494: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the kw parameter...

CVE-2024-57494

Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the kw parameter...

Amazon pays $2.5B settlement over deceptive Prime subscriptions

Another day, another settlement. Amazon has settled a lawsuit filed by the Federal Trade Commission FTC over misleading customers who signed up for Amazon Prime—though it claims it did nothing wrong. The FTC alleged that Amazon used deceptive methods to sign up consumers for Prime subscriptions—a...

E-Commerce Website admin_account_update.php file SQL injection vulnerability

E-Commerce Website is an e-commerce website. E-Commerce Website suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter userid in the file /pages/adminaccountupdate.php. An attacker can exploit this vulnerabili...