EUVD-2025-78289

Malicious code in smartleopardz3n npm...

EUVD-2025-71354

Malicious code in smartperchz3n npm...

EUVD-2025-66556

Malicious code in smartlemurz3n npm...

EUVD-2025-66557

Malicious code in smartbarnaclez3n npm...

EUVD-2025-51962

Malicious code in smart-apricot-gayal npm...

Malicious code in smart-jade-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463d81d73f188506c50c60d95ebc4e8f4c201a38961f852006ae6f90bf769268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51961

Malicious code in smart-beige-firefly npm...

EUVD-2025-51960

Malicious code in smart-jade-capybara npm...

EUVD-2025-51959

Malicious code in smart-sapphire-alligator npm...

EUVD-2025-57238

Malicious code in smartfireflyz3n npm...

WordPress plugin smart SEO SQL injection vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin smart SEO suffers from a SQL injection vulnerability that stems from the...

PT-2025-46455

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A double free condition exists in Windows Smart Card. This allows an authorized attacker to gain elevated privileges on a local system. Recommendations At the moment, there is no information...

EUVD-2025-49367

Malicious code in smartorangutanz3n npm...

CVE-2025-41107

Stored Cross Site Scripting XSS vulnerability in Smart School 7.0 due to lack of proper validation of user input when sending a POST request to '/onlineadmission', wich affects the parameters 'firstname', 'lastname', 'guardianname' and others. This vulnerability could allow a remote user to send ...

CVE-2025-41107

Stored Cross Site Scripting XSS vulnerability in Smart School 7.0 due to lack of proper validation of user input when sending a POST request to '/onlineadmission', wich affects the parameters 'firstname', 'lastname', 'guardianname' and others. This vulnerability could allow a remote user to send ...

EUVD-2025-44041

Stored Cross Site Scripting XSS vulnerability in Smart School 7.0 due to lack of proper validation of user input when sending a POST request to '/onlineadmission', wich affects the parameters 'firstname', 'lastname', 'guardianname' and others. This vulnerability could allow a remote user to send ...

CVE-2025-41107

The CVE-2025-41107 entry describes a Stored XSS in Smart School 7.0 caused by insufficient validation of user input in a POST to /online_admission, affecting fields such as firstname, lastname, guardian_name, etc. The issue could allow a remote attacker to craft input that is processed by an auth...

CVE-2025-41107 Stored XSS in Smart School

Stored Cross Site Scripting XSS vulnerability in Smart School 7.0 due to lack of proper validation of user input when sending a POST request to '/onlineadmission', wich affects the parameters 'firstname', 'lastname', 'guardianname' and others. This vulnerability could allow a remote user to send ...

CVE-2025-41107 Stored XSS in Smart School

Stored Cross Site Scripting XSS vulnerability in Smart School 7.0 due to lack of proper validation of user input when sending a POST request to '/onlineadmission', wich affects the parameters 'firstname', 'lastname', 'guardianname' and others. This vulnerability could allow a remote user to send ...

KERUI K259 5MP Wi-Fi / Tuya Smart 安全漏洞

KERUI K259 5MP Wi-Fi / Tuya Smart is a webcam from KERUI. A security vulnerability exists in KERUI K259 5MP Wi-Fi / Tuya Smart that originates from scanning the mounted TF/SD card at startup and executing a specific script, which could lead to code execution...