Digital Twin-Based Intrusion Detection for Vehicle Powertrain CAN Bus Systems

Existing automotive intrusion detection systems IDSs for the Controller Area Network CAN largely target discrepancies in message timing, frequency, or sequencing and cannot detect attacks that preserve these properties while manipulating the payload. Digital twins DTs have been used to emulate CA...

CVE-2026-7509

The KIA Subtitle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's the-subtitle shortcode before and after attributes in all versions up to, and including, 4.0.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This...

EUVD-2026-31406

The KIA Subtitle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's the-subtitle shortcode before and after attributes in all versions up to, and including, 4.0.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This...

CVE-2026-7509

The CVE-2026-7509 affects the WordPress KIA Subtitle plugin (

CVE-2026-7509 KIA Subtitle <= 4.0.1 - [Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')]

The KIA Subtitle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's the-subtitle shortcode before and after attributes in all versions up to, and including, 4.0.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This...

CVE-2026-7509 KIA Subtitle <= 4.0.1 - [Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')]

The KIA Subtitle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's the-subtitle shortcode before and after attributes in all versions up to, and including, 4.0.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This...

CVE-2026-7509: Improper Neutralization of Input During Web Page Generation

The KIA Subtitle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's the-subtitle shortcode before and after attributes in all versions up to, and including, 4.0.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This...

WordPress plugin KIA Subtitle has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

CVE-2022-37418

The Remote Keyless Entry RKE receiving unit on certain Nissan, Kia, and Hyundai vehicles through 2017 allows remote attackers to perform unlock operations and force a resynchronization after capturing two consecutive valid key fob signals over the radio, aka a RollBack attack. The attacker retain...

EUVD-2025-140567

Malicious code in kupaio-kia-jakaoai npm...

EUVD-2025-140569

Malicious code in kupaio-kia-jakaiaolapoai npm...

EUVD-2025-140574

Malicious code in kupaio-kia-jakafafswafofoai npm...

EUVD-2025-140566

Malicious code in kupaio-kia-jakaooai npm...

EUVD-2025-140575

Malicious code in kupaio-kia-jakafafsfoai npm...

Malicious code in ksai-kia-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9758c1238c38f9e3536dbf296fe668f879c2d2551c566585ffec797486c6bb82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140572

Malicious code in kupaio-kia-jakafafswofoai npm...

EUVD-2025-140648

Malicious code in ksai-kia-a npm...

Malicious code in kupaio-kia-jakaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556183d340bc260eb89c2540197dbda9dfbd40f6b7e5b79cf8761de33c6aa9a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140571

Malicious code in kupaio-kia-jakafasfoai npm...

MAL-2025-175700 Malicious code in kupaio-kia-jakasfoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d9cd01dcc2c58c08058f9c87c20aa60512e346c42728227fe6d646e3cc5dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...