Malicious code in car-igloo-ildu (npm)

The package car-igloo-ildu was found to contain malicious code...

MAL-2025-16524 Malicious code in car-igloo-ildu (npm)

The package car-igloo-ildu was found to contain malicious code...

MAL-2025-14350 Malicious code in alpha-car-wke3 (npm)

The package alpha-car-wke3 was found to contain malicious code...

MAL-2025-34617 Malicious code in teak-car-3glq (npm)

The package teak-car-3glq was found to contain malicious code...

MAL-2025-16528 Malicious code in car-shack-phk6 (npm)

The package car-shack-phk6 was found to contain malicious code...

Malicious code in car-shack-phk6 (npm)

The package car-shack-phk6 was found to contain malicious code...

MAL-2025-16905 Malicious code in cherry-car-nnik (npm)

The package cherry-car-nnik was found to contain malicious code...

Malicious code in cherry-car-nnik (npm)

The package cherry-car-nnik was found to contain malicious code...

MAL-2025-40982 Malicious code in ziggurat-car-sgp9 (npm)

The package ziggurat-car-sgp9 was found to contain malicious code...

Online portal exposed car and personal data, allowed anyone to remotely unlock cars

A carmaker’s online dealership portal has been found leaking the private information and vehicle data of its customers. This also meant that anyone with access could remotely break into a car. Researcher Eaton Zveare shared his discovery with TechCrunch. Although he said he has chosen not to...

Kenwood DMX958XR 操作系统命令注入漏洞

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...

Kenwood DMX958XR 安全漏洞

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a stack buffer overflow vulnerability that stems from JKRadioService not properly validating the length of user-supplied data, which can be exploited by an attacker to execute code in the root...

Kenwood DMX958XR 操作系统命令注入漏洞

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...

Kenwood DMX958XR 操作系统命令注入漏洞

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...

Kenwood DMX958XR 操作系统命令注入漏洞

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...

Kenwood DMX958XR 操作系统命令注入漏洞

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. An operating system command injection vulnerability exists in the Kenwood DMX958XR ReadMVGImage function, which can be exploited by an attacker to execute code in a root context...

Kenwood DMX958XR 操作系统命令注入漏洞

The Kenwood DMX958XR is an in-car infotainment system from Kenwood. The Kenwood DMX958XR suffers from a command injection vulnerability that can be exploited by an attacker to execute code in a root context...

CVE-2025-8337

A vulnerability, which was classified as problematic, has been found in code-projects Simple Car Rental System 1.0. This issue affects some unknown processing of the file /admin/addvehicles.php. The manipulation of the argument carname leads to cross site scripting. The attack may be initiated...

CVE-2025-8335

A vulnerability classified as problematic has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used...

The vulnerability of the personalizacao_selecao.php web manager of WeGIA allows attackers to perform cross-site scripting attacks.

The vulnerability of the personalizacaoselecao.php web handler of the WeGIA browser is related to the lack of measures taken to protect the website structure when processing the nomecar parameter. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks XSS...