247 matches found
CVE-2025-54947
Apache StreamPark versions 2.0.0–2.1.7 contain a hard-coded, immutable encryption key, enabling potential decryption/ forgery of encrypted data and unauthorized access. The issue arises from using a fixed key instead of a dynamically generated or securely configured one. Upgrade to 2.1.7 is recom...
CVE-2025-54947 Apache StreamPark: Use hard-coded key vulnerability
In Apache StreamPark versions 2.0.0 through 2.1.7, a security vulnerability involving a hard-coded encryption key exists. This vulnerability occurs because the system uses a fixed, immutable key for encryption instead of dynamically generating or securely configuring the key. Attackers may obtain...
CVE-2025-54981 Apache StreamPark: Weak Encryption Algorithm in StreamPark
Weak Encryption Algorithm in StreamPark, The use of an AES cipher in ECB mode and a weak random number generator for encrypting sensitive data, including JWT tokens, may have risked exposing sensitive authentication data This issue affects Apache StreamPark: from 2.0.0 before 2.1.7. Users are...
Apache StreamPark 安全漏洞
Apache StreamPark is the United States Apache Apache Foundation of a streaming media application development framework. Apache StreamPark suffers from a security bypass vulnerability due to the use of a fixed, immutable encryption key. An attacker could exploit the vulnerability to decrypt...
CVE-2025-64263
Missing Authorization vulnerability in PluginEver WP Content Pilot wp-content-pilot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Content Pilot: from n/a through = 2.1.7...
CVE-2025-64263
CVE-2025-64263 is a Missing Authorization (Broken Access Control) vulnerability in the WordPress WP Content Pilot plugin (wp-content-pilot) affecting versions up to and including 2.1.7. The issue enables misconfigured access control; CVSS 3.1 base score 5.4 (Medium), with network attack vector, l...
WordPress WP Content Pilot plugin <= 2.1.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin WP Content Pilot versions = 2.1.7...
CVE-2025-32657
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RadiusTheme Testimonial Slider And Showcase Pro testimonial-slider-showcase-pro allows PHP Local File Inclusion.This issue affects Testimonial Slider And Showcase Pro: from n/a...
CVE-2025-59580
Incorrect Privilege Assignment vulnerability in GoodLayers Goodlayers Core goodlayers-core allows Privilege Escalation.This issue affects Goodlayers Core: from n/a through 2.1.7...
EUVD-2025-35430
Incorrect Privilege Assignment vulnerability in GoodLayers Goodlayers Core goodlayers-core allows Privilege Escalation.This issue affects Goodlayers Core: from n/a through 2.1.7...
CVE-2025-59580 WordPress Goodlayers Core plugin < 2.1.7 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in GoodLayers Goodlayers Core goodlayers-core allows Privilege Escalation.This issue affects Goodlayers Core: from n/a through 2.1.7...
CVE-2025-59580
The CVE covers the WordPress Goodlayers Core plugin (goodlayers-core) with a Privilege Escalation due to Incorrect Privilege Assignment in versions prior to 2.1.7. The issue is classified as high severity (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and affects the plugin by allowing privilege...
PT-2025-43151
Name of the Vulnerable Software and Affected Versions RadiusTheme Testimonial Slider And Showcase Pro versions through 2.1.7 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows...
EUVD-2018-17441
Malware in sbrugna...
EUVD-2020-8123
Malware in sbrugna...
EUVD-2018-3169
Malware in sbrugna...
EUVD-2008-1421
Malware in sbrugna...
EUVD-2023-28248
Malicious code in bioql PyPI...