CVE-2026-95653

Concrete CMS Community Store before 2.7.8 derives digital product download tokens from order creation timestamps instead of random values, making tokens predictable. Unauthenticated attackers can enumerate sequential order and file identifiers to calculate valid download tokens and retrieve digit...

EUVD-2021-11532

Malware in sbrugna...

EUVD-2025-12243

Malicious code in bioql PyPI...

CVE-2025-3529

The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.1.2 via the 'fileurl' parameter. This makes it possible for unauthenticated attackers to view potentially sensitive information and download a digital...

HCL DRYiCE MyXalytics 安全漏洞

HCL DRYiCE MyXalytics is a unified reporting and dashboard product from HCL Corporation, USA. A security vulnerability exists in HCL DRYiCE MyXalytics that stems from vulnerability to sensitive information disclosure vulnerability...

Balancing User and Business Needs: The Key to Successful Digital Product Strategy

By Owais Sultan Balancing user and business needs is vital for successful digital product strategy. Achieving an equilibrium between user-centric design… This is a post from HackRead.com Read the original post: Balancing User and Business Needs: The Key to Successful Digital Product Strategy...

Simple eCommerce <= 2.2.5 - Arbitrary File Upload

The plugin does not check for the uploaded Downloadable Digital product file, allowing any file, such as PHP to be uploaded by an administrator. Furthermore, as there is no CSRF in place, attackers could also make a logged admin upload a malicious PHP file, which would lead to RCE PoC...