CVE-2023-43149

CVE-2023-43149 लेखक : Aitor Herrero Fuentes विक्रेता: SPA-Cart विक्रेता होमपेज: https://spa-cart.com/ सॉफ्टवेयर लिंक: https://demo.spa-cart.com/admin संस्करण: 1.9.0.3 परीक्षित पर: Windows 10 Pro CSRF मूल खाता जोड़ें क्रॉस साइट रिक्वेस्ट फोर्जरी कमजोरी एप्लिकेशन demo.spa-cart.com में एक दूरस्थ...

CVE-2023-43148

CVE-2023-43148 Autor : Aitor Herrero Fuentes Anbieter: SPA-Cart Anbieter-Homepage: https://spa-cart.com/ Software-Link: https://demo.spa-cart.com/admin Version: 1.9.0.3 Getestet auf: Windows 10 Pro CSRF – Alle Konten löschen Die Cross-Site-Request-Forgery-Schwachstelle in der Anwendung...

DoS-via-cache-poisoning-by-forcing-SPA-mode-CVE-2025-43864-

Bem-vindo ao React Router! Um modelo moderno e pronto para produção para construir aplicações React full-stack usando React Router. Recursos 🚀 Renderização no lado do servidor ⚡️ Hot Module Replacement HMR 📦 Empacotamento e otimização de assets 🔄 Carregamento de dados e mutações 🔒 TypeScript por...

htcap

HTCAP htcap ist ein Webanwendungs-Scanner, der in der Lage ist, Single-Page-Anwendungen SPA rekursiv zu durchsuchen, indem er Ajax-Aufrufe und DOM-änderungen abfängt. HAUPTFUNKTIONEN Rekursive DOM-Crawling-Engine Erkennt Ajax/Fetch/JSONP/WebSocket-Anfragen Unterstützt Cookies, Proxy,...

domdig

DOMDig DOMDig é um scanner de XSS DOM que executa dentro do navegador Chromium e pode escanear aplicações de página única SPA recursivamente. Diferente de outros scanners, o DOMDig pode rastrear qualquer aplicação web incluindo gmail monitorando modificações no DOM e requisições...

SPA-Cart eCommerce CMS 1.9.0.3 - Cross-Site Scripting

A vulnerability was found in SPA-Cart eCommerce CMS 1.9.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /search. The manipulation of the argument filterbrandid/filterprice leads to cross site scripting. The attack may be launched remotely...

htcap

HTCAP htcap is a web application scanner able to crawl single page application SPA recursively by intercepting ajax calls and DOM changes. KEY FEATURES Recursive DOM crawling engine Discovers ajax/fetch/jsonp/websocket requests Supports cookies, proxy, custom headers, http auth and more Heuristic...

wix-kickstartx-challenge-writeup

Wix KickstartX Challenge 2026 — Vollständiger Writeup Ergebnis: 200/200 100 % — Token: WKX-9245FA70-200 Datum: 24. März 2026 1. Entdeckung & Aufklärung Die Challenge-Ankündigung Ein LinkedIn-Post kündigte eine spezielle Challenge für Wix KickstartX an — ein Junior-Entwicklerprogramm. Die Regeln:...

CVE-2026-10595

A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA catch-all route implemented in backend/routers/ui.py. The vulnerability arises from the improper handling of user-controlled path input, which is directly joined into a filesystem path without...

Malicious code in devplatform-spa-plugin-s3-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d2d2addbad66de5b68e55eb91db20968268ed1f7a951835a35aef1159e4af41 On require of devplatform-spa-plugin-s3-router, index.js loads helpers.js which runs a bootstrap routine at module load. The code assembles Cloudflar...

Malicious code in devplatform-spa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 297ea05a85bad5f3af2ead77745d792c055efc94b9b58726fe3ee499821c745c On require'devplatform-spa', index.js loads loader.js which downloads an OS-specific binary from Cloudflare Workers endpoints whose hostnames are...

MAL-2026-12754 Malicious code in devplatform-spa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 297ea05a85bad5f3af2ead77745d792c055efc94b9b58726fe3ee499821c745c On require'devplatform-spa', index.js loads loader.js which downloads an OS-specific binary from Cloudflare Workers endpoints whose hostnames are...

Malicious code in devplatform-spa-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9cf6b251dcd1cb74d6b5dd84f62868d0213365ea555bbb8eb1d99dcdafedc26 index.js requires./polyfill on module load, which asynchronously fetches a platform-selected binary from runtime-assembled Cloudflare Workers...

MAL-2026-12755 Malicious code in devplatform-spa-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9cf6b251dcd1cb74d6b5dd84f62868d0213365ea555bbb8eb1d99dcdafedc26 index.js requires./polyfill on module load, which asynchronously fetches a platform-selected binary from runtime-assembled Cloudflare Workers...

MAL-2026-12770 Malicious code in devplatform-spa-plugin-location (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9472f7623159163739228ed6ec07beb8599d3867f7c5215e4bf0e4bbde5a78 On require of the package, index.js loads vendor.js, which selects a platform-specific payload URL by joining string fragments to reconstruct...

MAL-2026-12763 Malicious code in devplatform-spa-plugin-cobrowsing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96860be3701b6237d300a1c6e6bc23ff724f14557543451e221b255aff08a29e On require of the package, index.js loads runtime.js which selects a platform-specific endpoint, downloads an opaque binary over HTTPS from obfuscate...

Malicious code in devplatform-spa-plugin-history (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809274addc0525244480b108485ad3dbdba1a92b65025c1c48d549dd03c45f0b On require of the package, index.js loads bridge.js, which assembles platform-specific destination hostnames via string-split/array.join obfuscation...

MAL-2026-12767 Malicious code in devplatform-spa-plugin-history (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809274addc0525244480b108485ad3dbdba1a92b65025c1c48d549dd03c45f0b On require of the package, index.js loads bridge.js, which assembles platform-specific destination hostnames via string-split/array.join obfuscation...

Malicious code in devplatform-spa-plugin-i18next (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88e8b3586c4dee4e4e812d6dc1771ec4bc99bc01058c0ae3d2e8c0cdaa8072c8 index.js unconditionally requires./loader on load. loader.js reassembles Cloudflare workers.dev hostnames oob-worker.cf103-070.workers.dev,...

MAL-2026-12768 Malicious code in devplatform-spa-plugin-i18next (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88e8b3586c4dee4e4e812d6dc1771ec4bc99bc01058c0ae3d2e8c0cdaa8072c8 index.js unconditionally requires./loader on load. loader.js reassembles Cloudflare workers.dev hostnames oob-worker.cf103-070.workers.dev,...