EUVD-2024-22744

Malicious code in bioql PyPI...

CVE-2024-25413

A XSLT Server Side injection vulnerability exists in the Import Jobs function of FireBear Improved Import And Export v3.8.6 . Attackers can exploit this by providing a crafted XSLT file to execute arbitrary commands . This vulnerability affects Adobe Commerce environments using the FireBear plugi...

CVE-2024-25413: XML Injection (aka Blind XPath Injection)

A XSLT Server Side injection vulnerability in the Import Jobs function of FireBear Improved Import And Export v3.8.6 allows attackers to execute arbitrary commands via a crafted XSLT file...