1327 matches found
firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache)
...
firmware: cs_dsp: Fix OOB memory read access in KUnit test (wmfw info)
...
rseq: Fix segfault on registration when rseq_cs is non-zero
...
firmware: cs_dsp: Fix OOB memory read access in KUnit test
...
Malicious code in @zalastax/nolb-node-cs (npm)
The package @zalastax/nolb-node-cs was found to contain malicious code...
Malicious code in fk-cs-dashboards-dt-issue-type (npm)
The package fk-cs-dashboards-dt-issue-type was found to contain malicious code...
Malicious code in @zalastax/nolb-cs (npm)
The package @zalastax/nolb-cs was found to contain malicious code...
MAL-2025-17772 Malicious code in cs-security-service-client (npm)
The package cs-security-service-client was found to contain malicious code...
MAL-2025-17771 Malicious code in cs-config-loader (npm)
The package cs-config-loader was found to contain malicious code...
MAL-2025-20649 Malicious code in fk-cs-dashboards-dt-issue-type (npm)
The package fk-cs-dashboards-dt-issue-type was found to contain malicious code...
Malicious code in fk-cs-dashboards-skill-manager (npm)
The package fk-cs-dashboards-skill-manager was found to contain malicious code...
Malicious code in fk-cs-dashboards-dt-error-string (npm)
The package fk-cs-dashboards-dt-error-string was found to contain malicious code...
Malicious code in cs-security-service-client (npm)
The package cs-security-service-client was found to contain malicious code...
Malicious code in cs-config-loader (npm)
The package cs-config-loader was found to contain malicious code...
MAL-2025-11043 Malicious code in @zalastax/nolb-cs (npm)
The package @zalastax/nolb-cs was found to contain malicious code...
CVE-2025-50847
Cross Site Request Forgery CSRF vulnerability in CS Cart 4.18.3, allows attackers to add products to a user's comparison list via a crafted HTTP request...
CVE-2025-50850
An issue was discovered in CS Cart 4.18.3 allows the vendor login functionality lacks essential security controls such as CAPTCHA verification and rate limiting. This allows an attacker to systematically attempt various combinations of usernames and passwords brute-force attack to gain unauthoriz...
CVE-2025-50849
CS Cart 4.18.3 is vulnerable to Insecure Direct Object Reference IDOR. The user profile functionality allows enabling or disabling stickers through a parameter companyid sent in the request. However, this operation is not properly validated on the server side. An authenticated user can manipulate...
CVE-2025-50848
A file upload vulnerability was discovered in CS Cart 4.18.3, allows attackers to execute arbitrary code. CS Cart 4.18.3 allows unrestricted upload of HTML files, which are rendered directly in the browser when accessed. This allows an attacker to upload a crafted HTML file containing malicious...
CVE-2025-50850
An issue was discovered in CS Cart 4.18.3 allows the vendor login functionality lacks essential security controls such as CAPTCHA verification and rate limiting. This allows an attacker to systematically attempt various combinations of usernames and passwords brute-force attack to gain unauthoriz...