Intel QAT 安全漏洞

Intel QAT software refers to the collection of software components that support Intel QuickAssist technology. An untrusted pointer dereference vulnerability exists in Intel QAT software, which can be exploited by an attacker to access compromised information via the local system...

PT-2025-5642 · Wasmvm · Wasmvm

Name of the Vulnerable Software and Affected Versions: wasmvm versions 2.2.0 through 2.2.1 wasmvm versions 2.1.0 through 2.1.4 wasmvm versions 2.0.0 through 2.0.5 wasmvm versions prior to 1.5.8 Description: The issue can be used to slow down block production and requires a malicious contract...

WordPress plugin Counter Box 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

CVE-2025-23779

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in web-mv ResAds resads allows SQL Injection.This issue affects ResAds: from n/a through = 2.0.5...

CVE-2025-23664

Cross-Site Request Forgery CSRF vulnerability in Real Seguro Viagem Real Seguro Viagem seguro-viagem allows Stored XSS.This issue affects Real Seguro Viagem: from n/a through = 2.0.5...

CVE-2025-23559

Cross-Site Request Forgery CSRF vulnerability in Stepan Stepasyuk MemeOne allows Stored XSS.This issue affects MemeOne: from n/a through 2.0.5...

CVE-2025-23779

CVE-2025-23779 is an SQL Injection vulnerability in the ResAds WordPress plugin. Affected: ResAds versions n/a through 2.0.5. CVSS 3.1 (base 7.6, HIGH). Network attack vector, requires HIGH privileges, no user interaction, but no exploitation details provided here. Impact: confidentiality HIGH, a...

CVE-2025-23779 WordPress ResAds Plugin <= 2.0.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in web-mv ResAds resads allows SQL Injection.This issue affects ResAds: from n/a through = 2.0.5...

CVE-2025-23664

CVE-2025-23664 affects Real Seguro Viagem; description specifies CSRF vulnerability that enables Stored XSS in Real Seguro Viagem versions up to 2.0.5 (no vendor/product detail beyond that, n/a for affected version). CVSS 3.1 base 7.1 (High) per the initial metrics; exploitation vector is not det...

CVE-2025-23559

CVE-2025-23559 describes a Cross-Site Request Forgery (CSRF) vulnerability in the MemeOne WordPress plugin that enables Stored XSS. Affected software is MemeOne (versions from n/a through 2.0.5). CVSS v3.1 base score is 7.1 (HIGH). Connected sources confirm the CSRF to Stored XSS scenario, but no...

CVE-2025-23559 WordPress MemeOne plugin <= 2.0.5 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Stepan Stepasyuk MemeOne allows Stored XSS.This issue affects MemeOne: from n/a through 2.0.5...

WordPress ResAds Plugin <= 2.0.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin ResAds versions = 2.0.5...

WordPress plugin Real Seguro Viagem 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2025-5006 · Unknown · Real Seguro Viagem

Name of the Vulnerable Software and Affected Versions: Real Seguro Viagem versions n/a through 2.0.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS in Real Seguro Viagem. This means an attacker can perform actions on behalf of a user without...

CVE-2024-56292 WordPress Email Reminders Plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdevelop Email Reminders email-reminders allows Stored XSS.This issue affects Email Reminders: from n/a through = 2.0.5...

PT-2025-3255 · WordPress · Wpdevelop Oplugins Email Reminders

Name of the Vulnerable Software and Affected Versions: wpdevelop oplugins Email Reminders versions n/a through 2.0.5 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Stored XSS in wpdevelop...

PT-2024-36648 · 搜狐畅言 · 搜狐畅言

Name of the Vulnerable Software and Affected Versions: 搜狐畅言 畅言评论系统 versions n/a through 2.0.5 Description: The issue is related to a missing authorization vulnerability that allows the exploitation of incorrectly configured access control security levels. Recommendations: For versions n/a through...

PT-2024-17175 · Unknown · Cph2 Echarge Firmware

Name of the Vulnerable Software and Affected Versions: cph2 echarge firmware versions through 2.0.4 Description: The issue affects the cph2 echarge firmware, allowing OS Command Injection due to an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability...

PT-2024-39942 · WordPress · Woocommerce Order Proposal

Name of the Vulnerable Software and Affected Versions: WooCommerce Order Proposal plugin for WordPress versions up to and including 2.0.5 Description: The issue is due to the improper implementation of the allow payment without login function, making it possible for authenticated attackers with...

CVE-2024-9822

The Pedalo Connector plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.5. This is due to insufficient restriction on the 'loginadminuser' function. This makes it possible for unauthenticated attackers to log to the first user, who is usually the...