CVE-2026-62928: Improper Neutralization of Special Elements used in an OS Command

XING CPTrans-ME-X contains an OS Command Injection CWE-78. Unauthenticated OS command may be injected...

PT-2026-85410

Name of the Vulnerable Software and Affected Versions XING CPTrans-ME-X affected versions not specified Description XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere, which may lead to the leakage of sensitive system information...

PT-2026-85409

Name of the Vulnerable Software and Affected Versions XING CPTrans-ME-X affected versions not specified Description XING CPTrans-ME-X contains an OS Command Injection flaw, which allows an unauthenticated user to inject and execute arbitrary operating system commands. Recommendations At the momen...

CVE-2026-66840: Exposure of Sensitive System Information to an Unauthorized Control Sphere

XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere CWE-497. Sensitive system information may be leaked...

CVE-2026-70403: Use of Hard-coded Password

XING CPTrans-ME-X contains a Use of Hard-coded Password CWE-259. Anyone with the knowledge of the credential may log in to the affected device...

PT-2026-85411

🚨 CRITICAL: CVE-2026-69657 CVSS 9.8 XING CPTrans-ME-X uses default passwords allowing unauthorized remote access. Attackers can gain full control with no authentication required. Action: Change default credentials immediately. CVE Vulnerability PatchNow https://t.co/1Y4Tw4gKye...

PT-2026-85412

🚨 CRITICAL: CVE-2026-70403 | CVSS 9.8 XING CPTrans-ME-X contains hard-coded credentials CWE-259. Attackers with credential knowledge can gain full device access remotely. Impact: Complete compromise C/I/A: High CVE Vulnerability PatchNow ThreatIntel https://t.co/DGmuDzBNR6...

CVE-2026-69657: Use of Default Password

XING CPTrans-ME-X contains a Use of Default Password CWE-1393. Anyone with the knowledge of the credential may log in to the affected device...

EUVD-2010-4849

Malware in sbrugna...

EUVD-2025-12543

Malicious code in bioql PyPI...

CVE-2010-4885

Cross-site scripting XSS vulnerability in the XING Button xing extension before 1.0.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2024-11917

The JobSearch WP Job Board plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.9.2. This is due to improper configurations in the 'jobsearchxingresponsedatacallback', 'setaccesstokes', and 'googlecallback' functions. This makes it possible for...

Unauthorized Access Vulnerability in Xiao Xing Look Smart Camera

Xiao Xing Look Smart Camera is an important device under the ZTE Smart Home platform, which can help the owner to realize real-time monitoring of the home situation. Unauthorized access vulnerability exists in Xiao Xing Look Smart Camera, which can be exploited by attackers to obtain sensitive...

XSS Vulnerability in XYHCMS 3.6

Xing Yunhai CMS XYHCMS is a completely open source CMS content management system. XYHCMS 3.6 has an XSS vulnerability that can be exploited by attackers to obtain user cookie information...

Code execution vulnerability in XYHCMS backend Fr***.cl***.php file

Xing Yunhai CMS XYHCMS is a completely open source CMS content management system. A code execution vulnerability exists in the XYHCMS backend Fr.cl.php file. Attackers can use this vulnerability to obtain server privileges...

Unauthorized Access Vulnerability in FX Devices of Shenzhen Xingfusion Technology Co.

Shenzhen Xing Fusion Technology Co. was founded in 07, 2018. The company's business scope includes: information technology, computer hardware and software and peripherals, network systems, communication engineering, automotive technology, bioengineering and biological products. An unauthorized...

Yixing Xingsheng Information Technology Co., Ltd. website building system has SQL injection vulnerabilities

Yixing Xing Sheng Information Technology Co., Ltd. is a collection of network interactive media, planning, consulting, film and television, in one of the new network interactive service providers. Yixing Xing Sheng Information Technology Co., Ltd. station building system SQL injection...

XSS Vulnerability in XYHCMS

Xing Yunhai CMS XYHcms is a completely open source CMS content management system. XYHCMS has an XSS vulnerability that can be exploited by attackers to obtain administrator cookies...

File Upload Vulnerability in XYHCMS

Xing Yunhai CMS XYHCMS is a completely open source CMS content management system, simple and easy to use. XYHCMS file upload vulnerability , attackers can use the vulnerability to obtain server privileges...

Code Execution Vulnerability in Xingyunhai CMS V3.5

Xing Yunhai CMS XYHcms is a completely open source CMS content management system. XYH CMS V3.5 code execution vulnerabilities exist. Attackers can use the vulnerability to insert a sentence Trojan horse , to obtain server privileges...