Linux Distros Unpatched Vulnerability : CVE-2023-0819

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to v2.3.0-DEV. CVE-2023-0819 Note that Nessus relies on the presence of the package as reported ...

Linux Distros Unpatched Vulnerability : CVE-2019-8937

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mesefine, origine, and anno parameters in creaprezzi.php, tabella3.php, personalizza.php, and...

CVE-2025-54747

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpbakery Templatera templatera allows DOM-Based XSS.This issue affects Templatera: from n/a through = 2.3.0...

MAL-2025-28346 Malicious code in openzeppelin-solidity-2.3.0 (npm)

The package openzeppelin-solidity-2.3.0 was found to contain malicious code...

CVE-2025-54747 WordPress Templatera Plugin <= 2.3.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpbakery Templatera templatera allows DOM-Based XSS.This issue affects Templatera: from n/a through = 2.3.0...

WordPress Templatera Plugin <= 2.3.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by stealthcopter in WordPress Plugin Templatera versions = 2.3.0...

PT-2025-33394 · WordPress · Wpbakery Templatera

Name of the Vulnerable Software and Affected Versions: wpbakery Templatera versions through 2.3.0 Description: Improper neutralization of input during web page generation allows for DOM-Based Cross-Site Scripting XSS. Recommendations: At the moment, there is no information about a newer version...

CVE-2025-27559

Incorrect default permissions for some AI Playground software before version v2.3.0 alpha may allow an authenticated user to potentially enable escalation of privilege via local access...

Arbitrary File Upload

Overview hybridauth/hybridauth is a PHP Social Authentication Library Affected versions of this package are vulnerable to Arbitrary File Upload via install.php, which remains accessible post-installation. An attacker can execute arbitrary PHP code on the server by injecting malicious input into t...

Okta On-Premises Provisioning Agent 日志信息泄露漏洞

Okta On-Premises Provisioning Agent is a software from Okta USA that automates the creation, update and deletion of Otka user accounts in a local environment. A log information disclosure vulnerability exists in Okta On-Premises Provisioning Agent version 2.3.0 and prior versions, which originate...

FileManager 安全漏洞

FileManager is a file manager in Backpack for Laravel open source. A security vulnerability exists in FileManager version v2.3.0, which stems from improper file type checking and could lead to the execution of arbitrary code...

PT-2025-30041 · Unknown · File Manager

Name of the Vulnerable Software and Affected Versions: Filemanager version 2.3.0 Description: An arbitrary file upload vulnerability exists in the is allowed file type function. This allows attackers to execute arbitrary code by uploading a crafted PHP file. Recommendations: Filemanager version...

CVE-2025-52841

Cross-Site Request Forgery CSRF vulnerability in Laundry on Linux, MacOS allows to perform an Account Takeover. This issue affects Laundry: 2.3.0...

CVE-2025-52842

The CVE-2025-52842 issue concerns Laundry (Linux/macOS) v2.3.0, caused by improper neutralization of input during web page generation, enabling a reflected XSS that could lead to account takeover. Public references in NVD/Red Hat and other feeds confirm affected software and vulnerability descrip...

CVE-2025-52842 Laundry 2.3.0 - Account Takeover via Reflected XSS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Laundry on Linux, MacOS allows Account Takeover. This issue affects Laundry: 2.3.0...

CVE-2025-52842 Laundry 2.3.0 - Account Takeover via Reflected XSS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Laundry on Linux, MacOS allows Account Takeover. This issue affects Laundry: 2.3.0...

CVE-2025-52841 Laundry 2.3.0 - Account Takeover via CSRF

Cross-Site Request Forgery CSRF vulnerability in Laundry on Linux, MacOS allows to perform an Account Takeover. This issue affects Laundry: 2.3.0...

CVE-2025-52841 Laundry 2.3.0 - Account Takeover via CSRF

Cross-Site Request Forgery CSRF vulnerability in Laundry on Linux, MacOS allows to perform an Account Takeover. This issue affects Laundry: 2.3.0...

CVE-2025-52841

CVE-2025-52841 is a CSRF vulnerability in Laundry running on Linux and macOS, affecting Laundry 2.3.0 and enabling account takeover. Publicly available sources in the connected set confirm the issue as CSRF leading to potential unauthorized account access, with no explicit exploitation status in ...

Apache Seata 代码问题漏洞

Apache Seata is the United States Apache Apache Foundation of a microservices architecture in the United States to provide high-performance and easy to use distributed transaction services in the open source project . A deserialization vulnerability exists in Apache Seata versions prior to 2.0.0 ...