CVE-2025-7410

A vulnerability was found in code-projects LifeStyle Store 1.0. It has been classified as critical. Affected is an unknown function of the file /cartremove.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

CVE-2025-7410 code-projects LifeStyle Store cart_remove.php sql injection

A vulnerability was found in code-projects LifeStyle Store 1.0. It has been classified as critical. Affected is an unknown function of the file /cartremove.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

CVE-2025-7410 code-projects LifeStyle Store cart_remove.php sql injection

A vulnerability was found in code-projects LifeStyle Store 1.0. It has been classified as critical. Affected is an unknown function of the file /cartremove.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

CVE-2025-7410

Summary: CVE-2025-7410 affects LifeStyle Store 1.0 from Code-Projects. The issue is a vulnerability in the /cart_remove.php file where manipulating the ID argument enables SQL injection. The vulnerability is remote and the exploit has been disclosed publicly. Affected component: LifeStyle Store 1...

PT-2025-29173 · Apple · App Store Connect

Name of the Vulnerable Software and Affected Versions: App Store Connect versions prior to 3.0 Description: An authentication issue existed due to improved state management. An attacker with physical access to an unlocked device may be able to view sensitive user information. Recommendations:...

Code-Projects LifeStyle Store 安全漏洞

Code-Projects LifeStyle Store is an open source store software from Code-Projects. A security vulnerability exists in Code-Projects LifeStyle Store version 1.0, which stems from the operation of the parameter ID in the file /cartremove.php that can lead to SQL injection...

PT-2025-29148 · Code Projects · Lifestylestore

Name of the Vulnerable Software and Affected Versions: code-projects LifeStyle Store version 1.0 Description: A critical issue exists in code-projects LifeStyle Store 1.0. The vulnerability is located in an unknown functionality of the /success.php file. Manipulation of the ID argument results in...

Code-Projects LifeStyle Store 注入漏洞

Code-Projects LifeStyle Store is a store software of Code-Projects open source. An injection vulnerability exists in Code-Projects LifeStyle Store version 1.0, which stems from the manipulation of the parameter ID in the file /success.php that can lead to SQL injection...

Apple App Store Connect 安全漏洞

Apple App Store Connect is an Apple platform for developers to manage and distribute applications. A security vulnerability exists in Apple App Store Connect version 3.0, which stems from an authentication issue that could lead to the disclosure of sensitive user information...

PT-2025-29122 · Unknown · Lifestylestore

Name of the Vulnerable Software and Affected Versions: LifeStyle Store version 1.0 Description: A critical issue exists in code-projects LifeStyle Store, potentially allowing for remote SQL injection. The vulnerability is located in the /cart remove.php file, specifically through manipulation of...

CVE-2025-7211

A vulnerability was found in code-projects LifeStyle Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cartadd.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to t...

CVE-2025-7211

A vulnerability was found in code-projects LifeStyle Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cartadd.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to t...

CVE-2025-7211

CVE-2025-7211 affects code-projects LifeStyle Store 1.0. The vulnerability is an SQL injection in the cart_add.php endpoint triggered by manipulating the ID parameter. It can be initiated remotely and the exploit has been disclosed publicly. Multiple sources corroborate the issue and classify it ...

CVE-2025-7211 code-projects LifeStyle Store cart_add.php sql injection

A vulnerability was found in code-projects LifeStyle Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cartadd.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to t...

CVE-2025-7211 code-projects LifeStyle Store cart_add.php sql injection

A vulnerability was found in code-projects LifeStyle Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cartadd.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to t...

Code-Projects LifeStyle Store 注入漏洞

Code-Projects LifeStyle Store is a Code-Projects open source store software. An injection vulnerability exists in Code-Projects LifeStyle Store version 1.0, which originates from an SQL injection in the ID parameter of the cartadd.php file...

PT-2025-28835 · Unknown · Lifestylestore

Name of the Vulnerable Software and Affected Versions: LifeStyle Store version 1.0 Description: A critical issue has been found in the code, affecting the /cart add.php file, where the manipulation of the ID argument leads to SQL injection. This can be initiated remotely. Recommendations: For...

Anatsa Android Banking Trojan Hits 90,000 Users with Fake PDF App on Google Play

Cybersecurity researchers have discovered an Android banking malware campaign that has leveraged a trojan named Anatsa to target users in North America using malicious apps published on Google's official app marketplace. The malware, disguised as a "PDF Update" to a document viewer app, has been...

Malicious code in fe-lib-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f305a62f895c51f453506e8a82753487edc589bb9dc03f1ad92dbc3b4e64dc37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5690 Malicious code in fe-lib-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f305a62f895c51f453506e8a82753487edc589bb9dc03f1ad92dbc3b4e64dc37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...