CVE-2025-53549: Improper Neutralization of Special Elements used in an SQL Command

The Matrix Rust SDK is a collection of libraries that make it easier to build Matrix clients in Rust. An SQL injection vulnerability in the EventCache::findeventwithrelations method of matrix-sdk 0.11 and 0.12 allows malicious room members to execute arbitrary SQL commands in Matrix clients that...

CVE-2025-7411: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects LifeStyle Store 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /success.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has...

CVE-2025-31267: Improper Authentication

An authentication issue was addressed with improved state management. This issue is fixed in App Store Connect 3.0. An attacker with physical access to an unlocked device may be able to view sensitive user information...

CVE-2025-7410: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects LifeStyle Store 1.0. It has been classified as critical. Affected is an unknown function of the file /cartremove.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

Code-Projects LifeStyle Store Injection Vulnerability

Code-Projects LifeStyle Store is a store software of Code-Projects open source. An injection vulnerability exists in Code-Projects LifeStyle Store version 1.0, which stems from the manipulation of the parameter ID in the file /success.php that can lead to SQL injection...

PT-2025-29173 · Apple · App Store Connect

Name of the Vulnerable Software and Affected Versions: App Store Connect versions prior to 3.0 Description: An authentication issue existed due to improved state management. An attacker with physical access to an unlocked device may be able to view sensitive user information. Recommendations:...

PT-2025-29148 · Code Projects · Lifestylestore

Name of the Vulnerable Software and Affected Versions: code-projects LifeStyle Store version 1.0 Description: A critical issue exists in code-projects LifeStyle Store 1.0. The vulnerability is located in an unknown functionality of the /success.php file. Manipulation of the ID argument results in...

Apple App Store Connect security vulnerabilities

Apple App Store Connect is an Apple platform for developers to manage and distribute applications. A security vulnerability exists in Apple App Store Connect version 3.0, which stems from an authentication issue that could lead to the disclosure of sensitive user information...

Code-Projects LifeStyle Store security vulnerabilities

Code-Projects LifeStyle Store is an open source store software from Code-Projects. A security vulnerability exists in Code-Projects LifeStyle Store version 1.0, which stems from the operation of the parameter ID in the file /cartremove.php that can lead to SQL injection...

PT-2025-29122 · Unknown · Lifestylestore

Name of the Vulnerable Software and Affected Versions: LifeStyle Store version 1.0 Description: A critical issue exists in code-projects LifeStyle Store, potentially allowing for remote SQL injection. The vulnerability is located in the /cart remove.php file, specifically through manipulation of...

CVE-2025-7211

A vulnerability was found in code-projects LifeStyle Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cartadd.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to t...

CVE-2025-7211

A vulnerability was found in code-projects LifeStyle Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cartadd.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to t...

CVE-2025-7211 code-projects LifeStyle Store cart_add.php sql injection

A vulnerability was found in code-projects LifeStyle Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cartadd.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to t...

CVE-2025-7211 code-projects LifeStyle Store cart_add.php sql injection

A vulnerability was found in code-projects LifeStyle Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cartadd.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to t...

CVE-2025-7211

CVE-2025-7211 affects code-projects LifeStyle Store 1.0. The vulnerability is an SQL injection in the cart_add.php endpoint triggered by manipulating the ID parameter. It can be initiated remotely and the exploit has been disclosed publicly. Multiple sources corroborate the issue and classify it ...

Code-Projects LifeStyle Store Injection Vulnerability

Code-Projects LifeStyle Store is a Code-Projects open source store software. An injection vulnerability exists in Code-Projects LifeStyle Store version 1.0, which originates from an SQL injection in the ID parameter of the cartadd.php file...

CVE-2025-7211: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects LifeStyle Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cartadd.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to t...

PT-2025-28835 · Unknown · Lifestylestore

Name of the Vulnerable Software and Affected Versions: LifeStyle Store version 1.0 Description: A critical issue has been found in the code, affecting the /cart add.php file, where the manipulation of the ID argument leads to SQL injection. This can be initiated remotely. Recommendations: For...

Anatsa Android Banking Trojan Hits 90,000 Users with Fake PDF App on Google Play

Cybersecurity researchers have discovered an Android banking malware campaign that has leveraged a trojan named Anatsa to target users in North America using malicious apps published on Google's official app marketplace. The malware, disguised as a "PDF Update" to a document viewer app, has been...

Anatsa Android Banking Trojan Hits 90,000 Users with Fake PDF App on Google Play

Cybersecurity researchers have discovered an Android banking malware campaign that has leveraged a trojan named Anatsa to target users in North America using malicious apps published on Google's official app marketplace. The malware, disguised as a "PDF Update" to a document viewer app, has been...