216 matches found
CVE-2025-23887 WordPress Blog Summary plugin <= 0.1.2 β - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in scottwallick Blog Summary blog-summary allows Stored XSS.This issue affects Blog Summary: from n/a through = 0.1.2 β...
CVE-2025-23887 WordPress Blog Summary plugin <= 0.1.2 β - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in scottwallick Blog Summary blog-summary allows Stored XSS.This issue affects Blog Summary: from n/a through = 0.1.2 β...
WordPress Blog Summary plugin <= 0.1.2 β - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Blog Summary versions = 0.1.2 β...
WordPress Woo Tuner plugin <= 0.1.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mika in WordPress Plugin Woo Tuner versions = 0.1.2...
PT-2025-5072 · Woo Tuner · Woo Tuner
Name of the Vulnerable Software and Affected Versions: Woo Tuner versions 0.1.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Woo Tuner versions 0.1.2 and...
WordPress linkID 0.1.2 Missing Authorization / Information Disclosure Vulnerability
CVE-2024-12542 linkID = 0.1.2 - Missing Authorization to Unauthenticated Sensitive Information Exposure Description The linkID plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and...
WordPress linkID plugin <= 0.1.2 - Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability
Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability discovered by Francesco Carlucci in WordPress Plugin linkID versions = 0.1.2...
WordPress Content No Cache plugin <= 0.1.2 - Unauthenticated Private Content Disclosure vulnerability
Unauthenticated Private Content Disclosure vulnerability discovered by Francesco Carlucci in WordPress Plugin Content No Cache versions = 0.1.2...
WordPress plugin Content No Cache 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
Race Condition
Overview planai is an A simple framework for coordinating classical compute and LLM-based tasks. Affected versions of this package are vulnerable to Race Condition through dispatchnotify, dispatchonce, notifycompleted and taskcompleted methods. Note: The vulnerability is triggered under concurren...
Malicious code in artifact-lab-3-package-736f752d (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 dfb249857a1fcf0c79636d8692dc8b148d847336022dbe6f4ab558f6f5c2f97f Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...
PT-2024-28323 · Unknown · 2O3T-Utility
Name of the Vulnerable Software and Affected Versions: 2o3t-utility version 0.1.2 Description: The issue allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties using the extend function, which is affected by prototype pollution...
2o3t-Utility Security Vulnerabilities
2o3t-Utility is a simple Node.js basic tool library open-sourced by 2o3t. A security vulnerability exists in version v0.1.2 of 2o3t-Utility, which stems from inclusion of prototype contamination via the function extend, allowing an attacker to execute arbitrary code or cause a denial of service D...
CVE-2024-25359
An issue in zuoxingdong lagom v.0.1.2 allows a local attacker to execute arbitrary code via the pickleload function of the serialize.py file...
lagom 安全漏洞
lagom is a PyTorch infrastructure for rapid prototyping of reinforcement learning algorithms from the Xingdong Zuo personal developer. A security vulnerability exists in lagom version v.0.1.2, which stems from a vulnerability that allows a local attacker to execute arbitrary code via the picklelo...
Hacker Hotel Badge Security Breach
Hacker Hotel Badge is a chip badge of the Hacker Hotel organization. A security vulnerability exists in Hacker Hotel Badge 2024 versions 0.1.0 through 0.1.3, which stems from an unrestricted resource allocation and can lead to a denial of service attack...
abacuz (0.1.1), acmer (>=0.0.1, <=0.0.4) +371 more potentially affected by CVE-2023-49092 via rsa (>=0.1.2, <=0.8.2)
rsa CARGO version =0.1.2, =0.0.1, =0.12.0, =0.5.0, =0.2.0, =0.1.0, =1.0.1, =0.1.0, =0.3.11, =0.2.0, =0.1.0, =0.2.0, =0.11.0, =0.16.0 and more Source cves: CVE-2023-49092 Source advisory: OSV:RUSTSEC-2023-0071...
PT-2023-10320 · Unknown · Multibit Hd
Name of the Vulnerable Software and Affected Versions: MultiBit HD versions prior to 0.1.2 Description: The issue allows attackers to conduct bit-flipping attacks, inserting unspendable Bitcoin addresses into the list used to send fees to the developers. This is due to the lack of a message...
MultiBit HD Security Vulnerability
MultiBit HD is a bitcoin wallet open-sourced by MultiBit. A security vulnerability exists in versions prior to MultiBit HD 0.1.2 that stems from not setting the Message Authentication Code MAC...
Malicious code in eslint-config-web3-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e23c591b583354dc45114b2ff42008dd281f6a57772a8f5f59a249ab89f2fd84 The OpenSSF Package Analysis project identified 'eslint-config-web3-base' @ 0.1.2 npm as malicious. It is considered malicious because: - The...