752 matches found
Kubevirt 路径遍历漏洞
Kubevirt is a virtual machine manager in the KubeVirt open source. A path traversal vulnerability exists in KubeVirt versions prior to 1.5.3 and prior to 1.6.1, which stems from mishandling of symbolic links and a file ownership change issue, and could lead to reading arbitrary files in the...
Kubevirt 后置链接漏洞
Kubevirt is an open source virtual machine manager for KubeVirt. A back-linking vulnerability exists in KubeVirt versions prior to 1.5.3 and prior to 1.6.1, which stems from virt-handler not verifying that the launcher-sock is a symbolic link or a regular file, which could result in the ownership...
Kubevirt 授权问题漏洞
Kubevirt is an open source virtual machine manager from KubeVirt. An authorization issue vulnerability exists in Kubevirt versions prior to 1.5.3 and prior to 1.6.1, which stems from a flaw in the peer validation logic in virt-handler, which could allow an attacker to impersonate the virt-api and...
PT-2025-45440
Name of the Vulnerable Software and Affected Versions KubeVirt versions prior to 1.5.3 KubeVirt versions prior to 1.6.1 Description KubeVirt, a virtual machine management add-on for Kubernetes, contains a flaw where the virt-handler does not validate if the launcher-sock is a symbolic link or a...
PT-2025-45491
Name of the Vulnerable Software and Affected Versions KubeVirt versions 1.5.3 and below KubeVirt version 1.6.0 Description KubeVirt, a virtual machine management add-on for Kubernetes, has an issue in its authentication flow within the Kubernetes aggregation layer. The virt-api component does not...
WordPress Schema Scalpel plugin <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title in JSON-LD Schema vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Post Title in JSON-LD Schema vulnerability discovered by Peter Thaleikis in WordPress Plugin Schema Scalpel versions = 1.6.1...
CVE-2025-12118 Schema Scalpel <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title in JSON-LD Schema
The Schema Scalpel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post title in all versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping when outputting user-supplied data into JSON-LD schema markup. This makes it possible for...
CVE-2025-12118 Schema Scalpel <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title in JSON-LD Schema
The Schema Scalpel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post title in all versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping when outputting user-supplied data into JSON-LD schema markup. This makes it possible for...
WordPress plugin Schema Scalpel 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...
EUVD-2025-36359
InventoryGui affected by item duplication in GUIs which use GuiStorageElement...
InventoryGui 安全漏洞
InventoryGui is a plugin library from the individual developer Max Lee. A security vulnerability exists in InventoryGui 1.6.1-SNAPSHOT and prior versions, which stems from a vulnerability that may allow item duplication when using GuiStorageElement...
PT-2025-44048
Name of the Vulnerable Software and Affected Versions InventoryGui versions 1.6.1-SNAPSHOT and earlier Description A flaw exists in InventoryGui that could allow item duplication when the experimental Bundle item feature is enabled on the server. This issue affects any plugin utilizing the...
CVE-2025-9621 WidgetPack Comment System <= 1.6.1 - Cross-Site Request Forgery
The WidgetPack Comment System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.1. This is due to missing or incorrect nonce validation on the wpcmtsync action in the wpcmtrequesthandler function. This makes it possible for unauthenticated...
WordPress plugin WidgetPack Comment System 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...
PT-2025-41680
Name of the Vulnerable Software and Affected Versions WidgetPack Comment System versions prior to 1.6.2 Description The software is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce validation on the wpcmt sync action within the wpcmt request handler function. This allow...
EUVD-2017-9152
Malware in sbrugna...
EUVD-2019-0363
Malware in sbrugna...
EUVD-2017-2762
Malware in sbrugna...