1088 matches found
CVE-2025-59740
AndSoft e-TMS v25.03 has an OS command injection vulnerability arising from misuse of the m parameter in /clt/LOGINFRM_CAT.ASP. A crafted POST request can lead to execution of operating system commands on the server. Reported across multiple feeds (CNVD/CNNVD/CVELIST-derived notes; PT-SEC) with n...
AndSoft e-TMS 跨站脚本漏洞
AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn in the file...
CVE-2025-60991
A reflected cross-site scripted XSS vulnerability in Codazon Magento Themes v1.1.0.0 to v2.4.7 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload injected into the cat parameter...
PT-2025-40285
Name of the Vulnerable Software and Affected Versions Codazon Magento Themes versions 1.1.0.0 through 2.4.7 Description A reflected cross-site scripting XSS issue exists in Codazon Magento Themes. This allows attackers to execute arbitrary Javascript within a user's browser by injecting a crafted...
CVE-2025-60991
A reflected cross-site scripted XSS vulnerability in Codazon Magento Themes v1.1.0.0 to v2.4.7 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload injected into the cat parameter...
CVE-2025-60991
A reflected cross-site scripted XSS vulnerability in Codazon Magento Themes v1.1.0.0 to v2.4.7 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload injected into the cat parameter...
MAL-2025-47472 Malicious code in @cat-ai/assistant-component (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d4d09d0b50027d4061df3bcfc206f5e4c96c6e1a9f67f5ce3c6e997e91507e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
A Comparative Analysis of Ensemble-Based Machine Learning Approaches with Explainable AI for Multi-Class Intrusion Detection in Drone Networks
The growing integration of drones into civilian, commercial, and defense sectors introduces significant cybersecurity concerns, particularly with the increased risk of network-based intrusions targeting drone communication protocols. Detecting and classifying these intrusions is inherently...
Malicious code in cat-kale-tyy434-project (npm)
The package cat-kale-tyy434-project was found to contain malicious code...
Malicious code in cat-emerald-wpg440-project (npm)
The package cat-emerald-wpg440-project was found to contain malicious code...
Malicious code in desert-cat-lne445-project (npm)
The package desert-cat-lne445-project was found to contain malicious code...
Malicious code in cat-igloo-oii506-project (npm)
The package cat-igloo-oii506-project was found to contain malicious code...
MAL-2025-43714 Malicious code in cat-kale-tyy434-project (npm)
The package cat-kale-tyy434-project was found to contain malicious code...
MAL-2025-43973 Malicious code in desert-cat-lne445-project (npm)
The package desert-cat-lne445-project was found to contain malicious code...
MAL-2025-43712 Malicious code in cat-emerald-wpg440-project (npm)
The package cat-emerald-wpg440-project was found to contain malicious code...
MAL-2025-43713 Malicious code in cat-igloo-oii506-project (npm)
The package cat-igloo-oii506-project was found to contain malicious code...
PT-2025-51567
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc6-dirty 17 Description The Linux kernel contains a flaw in the HFS+ file system implementation. Specifically, a kernel memory safety issue KMSAN exists due to an uninitialized value in the hfsplus delete...
Malicious code in sed-deploy-shell-cat-grid (npm)
The package sed-deploy-shell-cat-grid was found to contain malicious code...