SPAV A.I CyberSecurity Scoring
24/03/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Schrader Pacific Advanced Valves in 2026.
No incidents recorded for Schrader Pacific Advanced Valves in 2026.
No incidents recorded for Schrader Pacific Advanced Valves in 2026.
Motor Vehicle Parts Manufacturing
Autoliv, Inc. is the worldwide leader in automotive safety systems. We develop, manufacture and market protective systems, such as airbags, seatbelts, steering wheels and pedestrian protection systems for all major automotive manufacturers in the world. Our products save 37,000 lives and prevent 450,000 injuries each year. Our ~65,000 employees in 25 countries are passionate about our vision of Saving More Lives and quality is at the heart of everything we do. We have 13 technical centers, with 20 test tracks. In the world of automotive occupant safety, we were the first to introduce the two- and three-point seat belt system and airbags for front and side impacts. We were also the first to launch pyrotechnic belt pretensioners and pedestrian protection systems. Autoliv, Inc. is a publicly traded Delaware U.S. corporation with its headquarters in Stockholm, Sweden. The shares are listed on the New York Stock Exchange (NYSE: ALV) and the Swedish Depository Receipts on Nasdaq Stockholm (ALIV sdb). For more information go to www.autoliv.com.
Valeo is a technology company and partner to all automakers and new mobility players worldwide. Valeo innovates to make mobility safer, smarter and more sustainable. Valeo enjoys technological and industrial leadership in electrification, driving assistance systems, reinvention of the interior experience and lighting everywhere. These four areas, vital to the transformation of mobility, are the Group's growth drivers. Valeo in figures: 21.5 billion euros in sales in 2024 | 106,100 employees, 28 countries, 155 plants, 64 research and development centers and 19 distribution platforms at February 28, 2025. Valeo is listed on the Paris Stock Exchange -- Valeo, entreprise technologique, partenaire de tous les constructeurs automobiles et des nouveaux acteurs de la mobilité, œuvre pour une mobilité plus propre, plus sûre et plus intelligente, grâce à ses innovations. Valeo dispose d’un leadership technologique et industriel dans l’électrification, les aides à la conduite, la réinvention de la vie à bord et l'éclairage à l’intérieur et à l’extérieur du véhicule. Ces quatre domaines, essentiels à la transformation de la mobilité, sont les vecteurs de croissance du Groupe. Valeo en chiffres: 21.5 milliards d'euros de chiffre d'affaires en 2024 | 106 100 employés, 28 pays, 155 sites de production, 64 centres de recherche et développement et 19 plateformes de distribution au 28 février 2025. Valeo est cotée à la Bourse de Paris.
MRF Limited, is a stalwart in the global tyre industry. Established in 1946, MRF has grown into one of the largest and most respected tyre manufacturers, renowned for its commitment to quality, innovation, and customer satisfaction. The company boasts a diverse range of high-quality tyres catering to various vehicles, including passenger cars, two-wheelers, commercial, agricultural and defence vehicles. Known for its cutting-edge research and development, MRF has consistently introduced innovative tyre technologies that enhance performance, safety, and fuel efficiency. MRF is not only the number 1 tyre manufacturer in the Indian market, but has also earned a formidable reputation globally, with its products exported to over 90 countries.
ZF is a global technology company supplying advanced mobility products and systems for passenger cars, commercial vehicles and industrial technology. Its comprehensive product range is primarily aimed at vehicle manufacturers, mobility providers and start-up companies in the fields of transportation and mobility. ZF electrifies a wide range of vehicle types. With its products, the company contributes to reducing emissions, protecting the climate as well as enhancing safe mobility. Alongside the automotive sector – passenger cars and commercial vehicles – ZF also serves market segments such as construction and agricultural machinery, wind power, marine propulsion, rail drives and test systems. With some 161,600 employees worldwide, ZF reported sales of €41.4 billion in fiscal year 2024. The company operates 161 production locations in 30 countries. For further press information and photos please visit: www.zf.com Imprint: https://www.zf.com/site/meta/en/imprint.html Data Protection: https://www.zf.com/master/media/en/corporate/m_zf_com/meta/data_protection_social_media/Data_Protection_Notice_Social_Media_EN.pdf
Latest updates, reports, and threat intel affecting the global network.
FOSSBilling is a free, open-source billing and client management system. In versions 0.5.6 through 0.7.2, when a `ClientPasswordReset` record already exists for a client (from a previous unexpired reset request), subsequent calls to the `reset_password` guest API endpoint reuse the existing token instead of generating a new one. The 15-minute validity window is anchored to the first request's `created_at` timestamp, not the time of the most recent email. An attacker who obtained the original reset link remains able to use it even after the victim requests a new reset, because the original token is never invalidated or rotated. Version 0.8.0 patches the issue. Some workarounds are available. Configure a reverse proxy (e.g., Nginx, Apache, Cloudflare) to apply per-IP rate limiting to the `/client/reset-password` endpoint to minimize the window of opportunity, and/or manually clear expired `client_password_reset` records from the database after a client reports a suspected compromise.
FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow a low-privileged staff account to grant arbitrary module permissions to itself through the admin API, resulting in persistent privilege escalation. A staff user that only has `staff.create_and_edit_staff` can call `/api/admin/staff/permissions_update` targeting their own account and write any permission structure, bypassing the intended role-based access control boundary. Version 0.8.0 patches the issue. Some workarounds are available. Restrict the `staff.create_and_edit_staff` permission to only highly trusted staff members and/or use a reverse proxy or WAF to restrict access to `/api/admin/staff/permissions_update` to specific trusted roles.
FOSSBilling is a free, open-source billing and client management system. Versions 0.5.3 through 0.7.2 allow authenticated clients to both read and reset API key service secrets for orders that are no longer in an `active` state (e.g., `suspended`, `canceled`). The root cause is missing order-state validation in two client API endpoints, despite an `isActive()` helper already existing in the `Serviceapikey` module and the frontend UI correctly gating access on `order.status == 'active'`. Version 0.8.0 contains a fix. Some workarounds are available. If the `Serviceapikey` module is not needed, uninstall it to remove the affected endpoints. One may also use a reverse proxy or WAF to restrict access to `/api/client/order/service` and `/api/client/serviceapikey/reset` based on application-level order-state logic.
FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow low-privileged staff accounts to perform unauthorized actions via admin API endpoints. The root cause is a combination of the `can_always_access` module flag (which grants all staff access to certain modules) and insufficient permission checks or unsafe parameter handling on individual endpoints. Version 0.8.0 contains a fix. Some workarounds are available. Restrict staff accounts to only those who need access to sensitive settings and/or use a reverse proxy or WAF to restrict access to the affected endpoints to trusted IP addresses or higher-privilege roles.
FOSSBilling is a free, open-source billing and client management system. In versions 0.5.6 through 0.7.2, when the "Require Email Confirmation" setting is enabled, a logged-in client with an unverified email address (`email_approved = 0`) can access all client-area pages (e.g. `/client/balance`, `/client/order/list`, `/client/invoice`) and read real account data, including wallet balances and transaction history. The API-side enforcement correctly restricts unverified clients to only profile-related endpoints, but the page-side enforcement is overly permissive, allowing any request whose path starts with `/client`. Version 0.8.0 contains a fix. No known workarounds that don't involve modifying the source code are available.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.