CVE-2026-5218

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Softtr Informatics Technology Trading Limited Company E-Commerce Pack allows Cross-Site Scripting XSS. This issue affects E-Commerce Pack: before 5.03.01.49...

CVE-2026-5218 HTML Injection in Softtr's E-Commerce Pack

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Softtr Informatics Technology Trading Limited Company E-Commerce Pack allows Cross-Site Scripting XSS. This issue affects E-Commerce Pack: before 5.03.01.49...

EUVD-2026-67002

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Softtr Informatics Technology Trading Limited Company E-Commerce Pack allows Cross-Site Scripting XSS. This issue affects E-Commerce Pack: before 5.03.01.49...

CVE-2026-5218 HTML Injection in Softtr's E-Commerce Pack

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Softtr Informatics Technology Trading Limited Company E-Commerce Pack allows Cross-Site Scripting XSS. This issue affects E-Commerce Pack: before 5.03.01.49...

CVE-2026-5218

Softtr Informatics Technology Trading Limited Company E-Commerce Pack (before 5.03.01.49 ) is affected by an improper neutralization of script-related HTML tags (basic XSS), allowing Cross-Site Scripting in a web page. The vulnerability is rated CVSS 4.3 (MEDIUM) with vector AV:N/AC:L/PR:N/UI:R/S...

CVE-2026-5218: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Softtr Informatics Technology Trading Limited Company E-Commerce Pack allows Cross-Site Scripting XSS. This issue affects E-Commerce Pack: before 5.03.01.49...

PT-2026-82484

Name of the Vulnerable Software and Affected Versions E-Commerce Pack versions prior to 5.03.01.49 Description Improper neutralization of script-related HTML tags in a web page allows Cross-Site Scripting XSS, a condition where malicious scripts are injected into trusted websites. Recommendations...

e-SIC Livre 0.2.2 Resource Consumption

e-SIC Livre versions 0.2.2 and below suffer from a resource consumption vulnerability in the CAPTCHA generation component. CVE-2026-50787 — Uncontrolled Resource Consumption in e-SIC Livre Summary A resource consumption vulnerability exists in the CAPTCHA generation component of e-SIC Livre...

CVE-2025-38001

Labor: CVE-2025-41744 - Verwendung eines Standard-Kryptographieschlüssels in Sprecher Automation SPRECON-E-C Download Download Lab ZIP : https://github.com/boeseejykbtanke348/CVE-2025-38001/releases/download/Release/CVE-2025-38001.zip 🚀 Überblick CVE-2025-41744 ist eine kritische Schwachstelle, d...

EUVD-2026-65703

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, emlparser.parser.HeaderParser.headerfetchparse in emlparser/parser.py uses email.utils.getaddresses to parse address-bearing e-mail...

[SECURITY] Fedora 44 Update: calibre-9.13.0-1.fc44

Calibre is meant to be a complete e-library solution. It includes library management, format conversion, news feeds to ebook conversion as well as e-book reader sync features. Calibre is primarily a ebook cataloging program. It manages your ebook collection for you. It is designed around the...

Defending Network Intrusion Detection Systems Based on Graph Neural Networks against Structural Adversarial Attacks

Graph Neural Networks GNNs represent a promising solution for Machine Learning ML based Network Intrusion Detection Systems NIDS, thanks to their ability to leverage both network flow features and topological patterns. While GNN classifiers demonstrate superior robustness against feature-based...

API

ShopEase API Security Shooting Range A carefully designed A...

[SECURITY] Fedora 43 Update: calibre-9.13.0-1.fc43

Calibre is meant to be a complete e-library solution. It includes library management, format conversion, news feeds to ebook conversion as well as e-book reader sync features. Calibre is primarily a ebook cataloging program. It manages your ebook collection for you. It is designed around the...

AI Is Learning to Write Genetic Code

This sort of research is both exciting and terrifying: The two models in question were told to generate complete genomes for a viable bacteriophage--a type of virus able to infect and replicate itself inside bacteria, destroying them from the inside. Using an existing bacteriophage as an...

CVE-2025-15671 Welcart e-Commerce < 2.12.1 - Session Fixation via uscesid Parameter

The Welcart e-Commerce WordPress plugin before 2.12.1 does not regenerate the session identifier on authentication and sets the session identifier from a user-supplied request parameter, allowing an unauthenticated attacker to fixate a shop member's session and take over their customer account...

CVE-2025-15671

The Welcart e-Commerce WordPress plugin, in versions before 2.12.1 , is vulnerable to a session fixation attack. The flaw exists because the plugin fails to regenerate the session identifier upon authentication and allows the session identifier to be set from a user-supplied request parameter (sp...

CVE-2025-15671 Welcart e-Commerce < 2.12.1 - Session Fixation via uscesid Parameter

The Welcart e-Commerce WordPress plugin before 2.12.1 does not regenerate the session identifier on authentication and sets the session identifier from a user-supplied request parameter, allowing an unauthenticated attacker to fixate a shop member's session and take over their customer account...

Oracle E-Business Suite (August 2026 CSPU)

The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affecte...

CVE-2025-15671: Improper Authentication

The Welcart e-Commerce WordPress plugin before 2.12.1 does not regenerate the session identifier on authentication and sets the session identifier from a user-supplied request parameter, allowing an unauthenticated attacker to fixate a shop member's session and take over their customer account...