268 matches found
WordPress Car Seller - Auto Classifieds Script - SQL Injection
The requestlistrequest AJAX call of the Car Seller - Auto Classifieds Script WordPress plugin through 2.1.0, available to both authenticated and unauthenticated users, does not sanitize, validate or escape the orderid POST parameter before using it in a SQL statement, leading to a SQL injection...
The_Automotive_Threat_Modeling_Template
Background A threat modeling workshop for automotive-related technologies requires DFDs with custom elements, tailored threats and specific recommendations. The lack of a specific template for automotive threat modeling brought about the development of the Automotive Threat Modeling Template, whi...
cars (>=1.1.0rc1, <=1.1.0), htmloverpdf (0.0.3) +1 more potentially affected by CVE-2026-106443 via weasyprint (53.0.0b2)
weasyprint PYPI version 53.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - cars =1.1.0rc1, =0.7.0, =0.7.12 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...
cars (>=1.1.0rc1, <=1.1.0), htmloverpdf (0.0.3) +1 more potentially affected by CVE-2026-106443 via weasyprint (53.0.0b2)
weasyprint PYPI version 53.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - cars =1.1.0rc1, =0.7.0, =0.7.12 Source cves: CVE-2026-106443 Source advisory: OSV:GHSA-R543-Q48M-4C9J...
@bsv/amountinator (0.2.12), @bsv/cars-cli (>=1.2.0, <=1.2.9) +8 more potentially affected by CVE-2026-56744 via @bsv/wallet-toolbox-client (1.8.3)
@bsv/wallet-toolbox-client NPM version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on @bsv/wallet-toolbox-client and may be impacted: - @bsv/amountinator 0.2.12 - @bsv/cars-cli =1.2.0, =1.2.0, =1.0.0, =0.0.1, =0.2.1, =0.1.0, =0.0.3, =1.1.5,...
PT-2026-95133
Name of the Vulnerable Software and Affected Versions The Motors – Car Dealership & Classified Listings Plugin versions prior to 1.4.121 Description Missing authorization checks in the mvl ajax dealer load cars function allow unauthenticated attackers to gain unauthorized access to data. This fla...
cars (>=1.1.0rc1, <=1.1.0), htmloverpdf (0.0.3) +1 more potentially affected by CVE-2026-55073 via weasyprint (53.0.0b2)
weasyprint PYPI version 53.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - cars =1.1.0rc1, =0.7.0, =0.7.12 Source cves: CVE-2026-55073 Source advisory: OSV:PYSEC-2026-3940...
cars (>=1.1.0rc1, <=1.1.0), htmloverpdf (0.0.3) +1 more potentially affected by CVE-2026-55073 via weasyprint (53.0.0b2)
weasyprint PYPI version 53.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - cars =1.1.0rc1, =0.7.0, =0.7.12 Source cves: CVE-2026-55073 Source advisory: OSV:GHSA-JF6Q-CHMF-3H3V...
Malicious code in do-wnload-available-36615-big-shiny-cars-skip6-dggtzj (npm)
The package do-wnload-available-36615-big-shiny-cars-skip6-dggtzj was found to contain malicious code. --- Credit: OpenSSF source...
A Device Hidden in Cars Across the US Leaves Them Vulnerable to Hacking and Paralysis. Patch It Now
Dealerships installed alarms in millions of vehicles—and left them in even if the buyer didn’t want them. Now researchers warn they can be hacked to unlock, track, and disable cars...
cars (>=1.1.0rc1, <=1.1.0), htmloverpdf (0.0.3) +1 more potentially affected by CVE-2026-49452 via weasyprint (53.0.0b2)
weasyprint PYPI version 53.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - cars =1.1.0rc1, =0.7.0, =0.7.12 Source cves: CVE-2026-49452 Source advisory: OSV:PYSEC-2026-3412...
cars (>=1.1.0rc1, <=1.1.0), htmloverpdf (0.0.3) +1 more potentially affected by CVE-2025-68616 via weasyprint (53.0.0b2)
weasyprint PYPI version 53.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - cars =1.1.0rc1, =0.7.0, =0.7.12 Source cves: CVE-2025-68616 Source advisory: OSV:PYSEC-2026-2034...
cars (>=1.1.0rc1, <=1.1.0), htmloverpdf (0.0.3) +1 more potentially affected by CVE-2026-49452 via weasyprint (53.0.0b2)
weasyprint PYPI version 53.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - cars =1.1.0rc1, =0.7.0, =0.7.12 Source cves: CVE-2026-49452 Source advisory: OSV:GHSA-JHHC-3HCP-QHM5...
cars (>=1.1.0rc1, <=1.1.0), htmloverpdf (0.0.3) +1 more potentially affected by CVE-2025-68616 via weasyprint (53.0.0b2)
weasyprint PYPI version 53.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - cars =1.1.0rc1, =0.7.0, =0.7.12 Source cves: CVE-2025-68616 Source advisory: OSV:GHSA-983W-RHVV-GWMV...
School’s AI system mistakes a bag of chips for a gun
An artificial intelligence AI detection system at Kenwood High School mistakenly flagged a student’s bag of potato chips as a gun, triggering a police response. The 16-year-old had finished eating a bag of Doritos and crumpled it up in his pocket when he was done. But the school’s AI-based gun...
EUVD-2015-1143
Malware in sbrugna...
EUVD-2010-4794
Malware in sbrugna...
EUVD-2005-4050
Malware in sbrugna...