CVE-2025-7051

On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers on an N-central server. This vulnerability is present in all deployments of N-central prior to 2025.2...

CVE-2025-9237

A vulnerability was found in CodeAstro Ecommerce Website 1.0. This impacts an unknown function of the file /customer/myaccount.php?editaccount of the component Edit Your Account Page. Performing manipulation of the argument Username results in cross site scripting. It is possible to initiate the...

CVE-2025-9237

CodeAstro Ecommerce Website 1.0 is affected by a cross-site scripting (XSS) issue in the Edit Your Account Page, specifically via manipulation of the Username parameter in /customer/my_account.php?edit_account. The vulnerability originates from an unknown function in that page; exploitation can b...

CVE-2025-9237: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in CodeAstro Ecommerce Website 1.0. This impacts an unknown function of the file /customer/myaccount.php?editaccount of the component Edit Your Account Page. Performing manipulation of the argument Username results in cross site scripting. It is possible to initiate the...

Exploit for CVE-2025-55444

CVE Reports by Anudeep Kadambala This repository contains det...

Manpower Data Breach Hits 144K, Workday Confirms 3rd-Party CRM Hack

A cyberattack on Manpower's Michigan office compromised data for 144,000 people. Meanwhile, Workday reveals a data breach in…...

CVE-2025-8908

A vulnerability was determined in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.5.4. Affected by this issue is some unknown functionality of the file crm/WeiXinApp/yunzhijia/event.php. The manipulation of the argument openid leads to sql injection. The attack may be launched...

Malicious code in customer-account-portal (npm)

The package customer-account-portal was found to contain malicious code...

Malicious code in hw-customer-stats (npm)

The package hw-customer-stats was found to contain malicious code...

Malicious code in eca-customer-web (npm)

The package eca-customer-web was found to contain malicious code...

MAL-2025-17839 Malicious code in customer-account-ui-extensions (npm)

The package customer-account-ui-extensions was found to contain malicious code...

MAL-2025-17838 Malicious code in customer-account-portal (npm)

The package customer-account-portal was found to contain malicious code...

MAL-2025-19109 Malicious code in eca-customer-web (npm)

The package eca-customer-web was found to contain malicious code...

MAL-2025-17841 Malicious code in customer-appointment-detail-widget (npm)

The package customer-appointment-detail-widget was found to contain malicious code...

Malicious code in generator-watson-social-customer-care (npm)

The package generator-watson-social-customer-care was found to contain malicious code...

Malicious code in customer-account-ui-extensions-react (npm)

The package customer-account-ui-extensions-react was found to contain malicious code...

Malicious code in uw-service-customer-services (npm)

The package uw-service-customer-services was found to contain malicious code...

MAL-2025-17840 Malicious code in customer-account-ui-extensions-react (npm)

The package customer-account-ui-extensions-react was found to contain malicious code...

Malicious code in generator-watson-voice-of-the-customer (npm)

The package generator-watson-voice-of-the-customer was found to contain malicious code...

Malicious code in customer-account-ui-extensions (npm)

The package customer-account-ui-extensions was found to contain malicious code...