259 matches found
WordPress Car Seller - Auto Classifieds Script - SQL Injection
The requestlistrequest AJAX call of the Car Seller - Auto Classifieds Script WordPress plugin through 2.1.0, available to both authenticated and unauthenticated users, does not sanitize, validate or escape the orderid POST parameter before using it in a SQL statement, leading to a SQL injection...
The_Automotive_Threat_Modeling_Template
Background A threat modeling workshop for automotive-related technologies requires DFDs with custom elements, tailored threats and specific recommendations. The lack of a specific template for automotive threat modeling brought about the development of the Automotive Threat Modeling Template, whi...
@bsv/amountinator (0.2.12), @bsv/cars-cli (>=1.2.0, <=1.2.9) +8 more potentially affected by CVE-2026-56744 via @bsv/wallet-toolbox-client (1.8.3)
@bsv/wallet-toolbox-client NPM version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on @bsv/wallet-toolbox-client and may be impacted: - @bsv/amountinator 0.2.12 - @bsv/cars-cli =1.2.0, =1.2.0, =1.0.0, =0.0.1, =0.2.1, =0.1.0, =0.0.3, =1.1.5,...
PT-2026-95133
Name of the Vulnerable Software and Affected Versions The Motors – Car Dealership & Classified Listings Plugin versions prior to 1.4.121 Description Missing authorization checks in the mvl ajax dealer load cars function allow unauthenticated attackers to gain unauthorized access to data. This fla...
A Device Hidden in Cars Across the US Leaves Them Vulnerable to Hacking and Paralysis. Patch It Now
Dealerships installed alarms in millions of vehicles—and left them in even if the buyer didn’t want them. Now researchers warn they can be hacked to unlock, track, and disable cars...
School’s AI system mistakes a bag of chips for a gun
An artificial intelligence AI detection system at Kenwood High School mistakenly flagged a student’s bag of potato chips as a gun, triggering a police response. The 16-year-old had finished eating a bag of Doritos and crumpled it up in his pocket when he was done. But the school’s AI-based gun...
EUVD-2010-4794
Malware in sbrugna...
EUVD-2008-4155
Malware in sbrugna...
EUVD-2015-1143
Malware in sbrugna...
EUVD-2005-4050
Malware in sbrugna...
EUVD-2025-24941
Malicious code in bioql PyPI...
CVE-2025-50861
The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps. This poses a risk of unintended access to application internals and can cause denial of service or logic abuse...
CVE-2025-50862
The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This presents a risk of user data exposure...
CVE-2025-50861
The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps. This poses a risk of unintended access to application internals and can cause denial of service or logic abuse...
MAL-2025-18548 Malicious code in do-wnload-available-36615-big-shiny-cars-skip6-dggtzj (npm)
The package do-wnload-available-36615-big-shiny-cars-skip6-dggtzj was found to contain malicious code...
Malicious code in do-wnload-available-36615-big-shiny-cars-skip6-dggtzj (npm)
The package do-wnload-available-36615-big-shiny-cars-skip6-dggtzj was found to contain malicious code...
Altus Cars Lotus Cars Android app 安全漏洞
Altus Cars Lotus Cars Android app is a mobile app from UK-based Altus Cars that provides vehicle remote control and connectivity services. A security vulnerability exists in Altus Cars Lotus Cars Android app version 1.2.8, which stems from allowBackup set to true, which could lead to user data...
CVE-2025-50861
The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps. This poses a risk of unintended access to application internals and can cause denial of service or logic abuse...
CVE-2025-50861
The Lotus Cars Android app com.lotus.carsdomestic.intl 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps. This poses a risk of unintended access to application internals and can cause denial of service or logic abuse...
PT-2025-33409 · Lotus Cars · Lotus Cars Android App
Name of the Vulnerable Software and Affected Versions: Lotus Cars Android App version 1.2.8 Description: The Lotus Cars Android app com.lotus.carsdomestic.intl version 1.2.8 contains an exported component, PushDeepLinkActivity, which is accessible without authentication via ADB or malicious apps...