PT-2026-4932

Dirsearch 0.4.1 contains a CSV injection vulnerability when using the --csv-report flag that allows attackers to inject formulas through redirected endpoints. Attackers can craft malicious server redirects with comma-separated paths containing Excel formulas to manipulate the generated CSV report...

MiracleLinux 9 : bubblewrap-0.4.1-8.el9, flatpak-1.12.9-3.el9 (AXSA:2024-9109:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9109:02 advisory. flatpak: Access to files outside sandbox for apps using persistent= --persist CVE-2024-42472 Tenable has extracted the preceding description block directly...

CVE-2025-23533

Cross-Site Request Forgery CSRF vulnerability in zetxek WP Lyrics wplyrics allows Stored XSS.This issue affects WP Lyrics: from n/a through = 0.4.1...

CVE-2025-62124

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Soli WP Post Signature wp-post-signature allows Stored XSS.This issue affects WP Post Signature: from n/a through = 0.4.1...

CVE-2025-62124 WordPress WP Post Signature plugin <= 0.4.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Soli WP Post Signature allows Stored XSS.This issue affects WP Post Signature: from n/a through 0.4.1...

EUVD-2025-205964

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Soli WP Post Signature allows Stored XSS.This issue affects WP Post Signature: from n/a through 0.4.1...

CVE-2025-61557

nixseparatedebuginfod before v0.4.1 is vulnerable to Directory Traversal...

WordPress plugin WP Post Signature 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

EUVD-2025-205814

nixseparatedebuginfod before v0.4.1 is vulnerable to Directory Traversal...

CVE-2025-61557

nixseparatedebuginfod before v0.4.1 is vulnerable to Directory Traversal...

nixseparatedebuginfod 安全漏洞

nixseparatedebuginfod is a software debugger by the individual developer Guillaume Girol. A security vulnerability exists in nixseparatedebuginfod versions prior to 0.4.1, which originates from a directory traversal that may result in directory traversal...

PT-2025-54185

Name of the Vulnerable Software and Affected Versions nixseparatedebuginfod versions prior to 0.4.1 Description nixseparatedebuginfod before version 0.4.1 contains a Directory Traversal issue. Recommendations Update to version 0.4.1 or later...

CVE-2025-61557

nixseparatedebuginfod before v0.4.1 is vulnerable to Directory Traversal...

CVE-2025-61557

The CVE-2025-61557 entry relates to nixseparatedebuginfod before v0.4.1, which is vulnerable to a Directory Traversal flaw. The connected Red Hat, NVD/NVD-derived and OSV entries corroborate the vulnerability in nixseparatedebuginfod prior to 0.4.1. Impact details are limited to directory travers...

Race Condition

Overview nvidia-resiliency-ext is a NVIDIA Resiliency Package Affected versions of this package are vulnerable to Race Condition in the checkpointing core. An attacker can gain unauthorized access to sensitive information, modify data, disrupt service availability, or escalate privileges by...

Harmonix on AWS 安全漏洞

Harmonix on AWS is a developer portal open-sourced by Amazon Web Services - Labs. A security vulnerability exists in Harmonix on AWS version 0.4.1 and earlier, which stems from an overly lax IAM trust policy that could lead to elevation of privilege...

CVE-2025-11985

CVE-2025-11985 concerns Realty Portal for WordPress (versions ≤ 0.4.1). The vulnerability arises from a missing capability check in rp_save_property_settings, enabling authenticated users with Subscriber+ privileges to modify arbitrary WordPress options. This can be exploited to set the default r...

WordPress plugin Realty Portal 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

CVE-2025-12021

The WP-OAuth plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'errordescription' parameter in all versions up to, and including, 0.4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary w...

EUVD-2025-60951

The WP-OAuth plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'errordescription' parameter in all versions up to, and including, 0.4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary w...