PT-2026-4199

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGoods Grand Spa grandspa allows Reflected XSS.This issue affects Grand Spa: from n/a through = 3.5.5...

CVE-2023-43149

SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery CSRF that allows a remote attacker to add an admin user with role status...

CVE-2023-4548

A vulnerability classified as critical has been found in SPA-Cart eCommerce CMS 1.9.0.3. This affects an unknown part of the file /search of the component GET Parameter Handler. The manipulation of the argument filterbrandid leads to sql injection. It is possible to initiate the attack remotely...

CVE-2024-58304

CVE-2024-58304 – SPA-CART CMS 1.9.0.3 is affected by a stored cross-site scripting vulnerability in the product description parameter. The issue allows authenticated administrators to inject JavaScript via the descr field in the product edit form, causing arbitrary code execution in the web brows...

CVE-2024-58304 SPA-CART CMS 1.9.0.3 Stored Cross-Site Scripting

SPA-CART CMS 1.9.0.3 contains a stored cross-site scripting vulnerability in the product description parameter that allows authenticated administrators to inject malicious scripts. Attackers can submit JavaScript payloads through the 'descr' parameter in the product edit form to execute arbitrary...

SPA-CART CMS 跨站脚本漏洞

SPA-CART CMS is a content management system for Oleg Individual Developers. A cross-site scripting vulnerability exists in SPA-CART CMS version 1.9.0.3, which stems from the presence of stored cross-site scripting in the product description parameter that could lead to the execution of arbitrary...

CVE-2025-56700

Boolean SQL injection vulnerability in the web app of Base Digitale Group spa product Centrax Open PSIM version 6.1 allows a low level priviliged user that has access to the platform, to execute arbitrary SQL commands via the datafine parameter...

Malicious Package

Overview @pcxm/gasket-single-spa is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

EUVD-2025-33594

Malicious code in @pcxm/gasket-single-spa npm...

EUVD-2006-7103

Malware in sbrugna...

EUVD-2014-5828

Malware in sbrugna...

EUVD-2008-2089

Malware in sbrugna...

EUVD-2006-0454

Malware in sbrugna...

EUVD-2005-0023

Malware in sbrugna...

EUVD-2020-5068

Malware in sbrugna...

EUVD-2006-0455

Malware in sbrugna...

EUVD-2005-1904

Malware in sbrugna...

EUVD-2006-0456

Malware in sbrugna...

Malicious code in @pcxm/gasket-single-spa (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a9af818f322b10614f05f0798d081607acaf0edf591f3bc2ddd3fad0e4d3b10 Any computer that has this package installed or running should be considered...

MAL-2025-48290 Malicious code in @pcxm/gasket-single-spa (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a9af818f322b10614f05f0798d081607acaf0edf591f3bc2ddd3fad0e4d3b10 Any computer that has this package installed or running should be considered...