CVE-2026-12204 ShopXO Scheduled Task Endpoint Crontab.php GoodsGiveIntegral authorization

A vulnerability was determined in ShopXO up to 6.7.1. This vulnerability affects the function OrderClose/OrderSuccess/PayLogOrderClose/GoodsGiveIntegral of the file app/api/controller/Crontab.php of the component Scheduled Task Endpoint. Executing a manipulation can lead to authorization bypass...

EUVD-2026-36679

A vulnerability was determined in ShopXO up to 6.7.1. This vulnerability affects the function OrderClose/OrderSuccess/PayLogOrderClose/GoodsGiveIntegral of the file app/api/controller/Crontab.php of the component Scheduled Task Endpoint. Executing a manipulation can lead to authorization bypass...

CVE-2026-1733 Zhong Bang CRMEB :uni tidyOrder improper authorization

A vulnerability was identified in Zhong Bang CRMEB up to 5.6.3. This affects the function detail/tidyOrder of the file /api/storeintegral/order/detail/:uni. The manipulation of the argument orderid leads to improper authorization. The attack can be initiated remotely. The exploit is publicly...

Malicious code in integral_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db72c70fab06809e70f842709b80bb228bfe2e73446e76af21d1e7af713ddd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in integral_catfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e67a4e4a3bf39c92b4e0519021632e79b1f57ab8434e539e6bfb73e916d761c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127430 Malicious code in integral_catfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e67a4e4a3bf39c92b4e0519021632e79b1f57ab8434e539e6bfb73e916d761c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-91065

Malicious code in integraloctopusz3n npm...

EUVD-2025-76538

Malicious code in integralkiwi-notthedevs npm...

EUVD-2025-78994

Malicious code in integralmolluskz3n npm...

EUVD-2025-78992

Malicious code in integralwildebeestz3n npm...

EUVD-2025-81530

Malicious code in integralreindeerdumbs npm...

EUVD-2025-53720

Malicious code in integral-peach-goat npm...

EUVD-2025-53721

Malicious code in integral-lime-cod npm...

EUVD-2025-53723

Malicious code in integral-crimson-wombat npm...

EUVD-2025-53722

Malicious code in integral-green-marlin npm...

EUVD-2025-49974

Malicious code in integralbasiliskz3n npm...

Neural-Inspired Advances in Integral Cryptanalysis

The study by Gohr et.al at CRYPTO 2019 and sunsequent related works have shown that neural networks can uncover previously unused features, offering novel insights into cryptanalysis. Motivated by these findings, we employ neural networks to learn features specifically related to integral...

CVE-2024-4406

Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required to exploit this vulnerability in that the...

CVE-2024-4406

Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required to exploit this vulnerability in that the...

CVE-2024-4406 Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability

Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required to exploit this vulnerability in that the...