CVE-2025-7662: Improper Neutralization of Special Elements used in an SQL Command

The Gestion de tarifs plugin for WordPress is vulnerable to SQL Injection via the 'tarif' and 'intitule' shortcodes in all versions up to, and including, 1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

WordPress plugin Gestion de tarifs SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A SQL injection...

Linux Distros Unpatched Vulnerability : CVE-2025-22080

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Prevent integer overflow in hdrfirstde The deoff and used variables come from the...

WordPress Gestion de tarifs plugin <= 1.4 - Authenticated (Contributor+) SQL Injection vulnerability

Authenticated Contributor+ SQL Injection vulnerability discovered by johska in WordPress Plugin Gestion de tarifs versions = 1.4...

Malicious code in @zalastax/nolb-de- (npm)

The package @zalastax/nolb-de- was found to contain malicious code...

Malicious code in @zalastax/nolb-de_ (npm)

The package @zalastax/nolb-de was found to contain malicious code...

Malicious code in como-espiar-whatsapp-de-forma-segura (npm)

The package como-espiar-whatsapp-de-forma-segura was found to contain malicious code...

Malicious code in do-wnload-available-135622-de-facto-s0jrf-jhgphg (npm)

The package do-wnload-available-135622-de-facto-s0jrf-jhgphg was found to contain malicious code...

MAL-2025-17438 Malicious code in como-espiar-whatsapp-de-forma-segura (npm)

The package como-espiar-whatsapp-de-forma-segura was found to contain malicious code...

Malicious code in a-lbum-do-wnload-avai-lable-file-363039-de-doorn-lu0q1-tqebeu (npm)

The package a-lbum-do-wnload-avai-lable-file-363039-de-doorn-lu0q1-tqebeu was found to contain malicious code...

MAL-2025-9912 Malicious code in @zalastax/nolb-_de (npm)

The package @zalastax/nolb-de was found to contain malicious code...

MAL-2025-11112 Malicious code in @zalastax/nolb-de- (npm)

The package @zalastax/nolb-de- was found to contain malicious code...

MAL-2025-11115 Malicious code in @zalastax/nolb-de_ (npm)

The package @zalastax/nolb-de was found to contain malicious code...

MAL-2025-18545 Malicious code in do-wnload-available-135622-de-facto-s0jrf-jhgphg (npm)

The package do-wnload-available-135622-de-facto-s0jrf-jhgphg was found to contain malicious code...

CVE-2025-8920

A vulnerability was identified in Portabilis i-Diario 1.6. Affected by this vulnerability is an unknown functionality of the file /dicionario-de-termos-bncc of the component Dicionário de Termos BNCC Page. The manipulation of the argument Planos de ensino leads to cross site scripting. The attack...

CVE-2025-8920

A vulnerability was identified in Portabilis i-Diario 1.6. Affected by this vulnerability is an unknown functionality of the file /dicionario-de-termos-bncc of the component Dicionário de Termos BNCC Page. The manipulation of the argument Planos de ensino leads to cross site scripting. The attack...

CVE-2025-8919

A vulnerability was determined in Portabilis i-Diario up to 1.6. Affected is an unknown function of the file /objetivos-de-aprendizagem-e-habilidades of the component History Page. The manipulation of the argument código/objetivo habilidade leads to cross site scripting. It is possible to launch...

CVE-2025-8920 Portabilis i-Diario Dicionário de Termos BNCC dicionario-de-termos-bncc cross site scripting

A vulnerability was identified in Portabilis i-Diario 1.6. Affected by this vulnerability is an unknown functionality of the file /dicionario-de-termos-bncc of the component Dicionário de Termos BNCC Page. The manipulation of the argument Planos de ensino leads to cross site scripting. The attack...

CVE-2025-8920 Portabilis i-Diario Dicionário de Termos BNCC dicionario-de-termos-bncc cross site scripting

A vulnerability was identified in Portabilis i-Diario 1.6. Affected by this vulnerability is an unknown functionality of the file /dicionario-de-termos-bncc of the component Dicionário de Termos BNCC Page. The manipulation of the argument Planos de ensino leads to cross site scripting. The attack...

Malicious code in st-py-de-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a0110859887f6cd8d6e81ff1c6715dd4a5d2a1c84c28b71cb09320e33e10cce5 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...