EUVD-2025-51961

Malicious code in smart-beige-firefly npm...

EUVD-2025-51960

Malicious code in smart-jade-capybara npm...

EUVD-2025-51962

Malicious code in smart-apricot-gayal npm...

EUVD-2025-51959

Malicious code in smart-sapphire-alligator npm...

Malicious code in smart-jade-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463d81d73f188506c50c60d95ebc4e8f4c201a38961f852006ae6f90bf769268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-57238

Malicious code in smartfireflyz3n npm...

WordPress plugin smart SEO SQL injection vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin smart SEO suffers from a SQL injection vulnerability that stems from the...

PT-2025-46455

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A double free condition exists in Windows Smart Card. This allows an authorized attacker to gain elevated privileges on a local system. Recommendations At the moment, there is no information...

CVE-2025-59505: Double Free

Double free in Windows Smart Card allows an authorized attacker to elevate privileges locally...

EUVD-2025-49367

Malicious code in smartorangutanz3n npm...

CVE-2025-41107

Stored Cross Site Scripting XSS vulnerability in Smart School 7.0 due to lack of proper validation of user input when sending a POST request to '/onlineadmission', wich affects the parameters 'firstname', 'lastname', 'guardianname' and others. This vulnerability could allow a remote user to send ...

CVE-2025-41107

Stored Cross Site Scripting XSS vulnerability in Smart School 7.0 due to lack of proper validation of user input when sending a POST request to '/onlineadmission', wich affects the parameters 'firstname', 'lastname', 'guardianname' and others. This vulnerability could allow a remote user to send ...

CVE-2025-41107

The CVE-2025-41107 entry describes a Stored XSS in Smart School 7.0 caused by insufficient validation of user input in a POST to /online_admission, affecting fields such as firstname, lastname, guardian_name, etc. The issue could allow a remote attacker to craft input that is processed by an auth...

EUVD-2025-44041

Stored Cross Site Scripting XSS vulnerability in Smart School 7.0 due to lack of proper validation of user input when sending a POST request to '/onlineadmission', wich affects the parameters 'firstname', 'lastname', 'guardianname' and others. This vulnerability could allow a remote user to send ...

CVE-2025-41107 Stored XSS in Smart School

Stored Cross Site Scripting XSS vulnerability in Smart School 7.0 due to lack of proper validation of user input when sending a POST request to '/onlineadmission', wich affects the parameters 'firstname', 'lastname', 'guardianname' and others. This vulnerability could allow a remote user to send ...

CVE-2025-41107 Stored XSS in Smart School

Stored Cross Site Scripting XSS vulnerability in Smart School 7.0 due to lack of proper validation of user input when sending a POST request to '/onlineadmission', wich affects the parameters 'firstname', 'lastname', 'guardianname' and others. This vulnerability could allow a remote user to send ...

CVE-2025-41107: Improper Neutralization of Input During Web Page Generation

Stored Cross Site Scripting XSS vulnerability in Smart School 7.0 due to lack of proper validation of user input when sending a POST request to '/onlineadmission', wich affects the parameters 'firstname', 'lastname', 'guardianname' and others. This vulnerability could allow a remote user to send ...

CVE-2025-63296: Improper Neutralization of Special Elements used in a Command

KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anykaservice.sh scans mounted TF/SD cards and, if /mnt/update.nor.sh is present, copies it to /tmp/net.sh and executes it as root...

KERUI K259 5MP Wi-Fi / Tuya Smart 安全漏洞

KERUI K259 5MP Wi-Fi / Tuya Smart is a webcam from KERUI. A security vulnerability exists in KERUI K259 5MP Wi-Fi / Tuya Smart that originates from scanning the mounted TF/SD card at startup and executing a specific script, which could lead to code execution...

Synergistic Development of Cybersecurity and Functional Safety for Smart Electric Vehicles

The introduction of Smart Electric Vehicles SEVs represents an increasingly disruption on automotive area, once integrates advanced computer and communication technologies to highly electrical cars, which come with high performances, environment friendly and user friendly characteristics . But th...