EUVD-2025-10469

Malicious code in bioql PyPI...

WordPress imEvent Theme <= 3.4.0 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme imEvent versions = 3.4.0...

CVE-2025-58795

Missing Authorization vulnerability in Payoneer Checkout Payoneer Checkout payoneer-checkout allows Content Spoofing.This issue affects Payoneer Checkout: from n/a through = 3.4.0...

CVE-2025-58795

Missing Authorization vulnerability in Payoneer Checkout Payoneer Checkout payoneer-checkout allows Content Spoofing.This issue affects Payoneer Checkout: from n/a through = 3.4.0...

CVE-2025-58795 WordPress Payoneer Checkout Plugin <= 3.4.0 - Content Spoofing Vulnerability

Missing Authorization vulnerability in Payoneer Checkout Payoneer Checkout payoneer-checkout allows Content Spoofing.This issue affects Payoneer Checkout: from n/a through = 3.4.0...

CVE-2025-58795

CVE-2025-58795 describes a missing authorization vulnerability in the WordPress plugin Payoneer Checkout (versions n/a through 3.4.0) that allows content spoofing. The issue arises from lack of proper authorization checks, enabling an attacker to spoof content via this plugin’s checkout flow. Pub...

WordPress plugin Payoneer Checkout 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2022-3190

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denial of service via packet injection or...

Linux Distros Unpatched Vulnerability : CVE-2022-20001

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fish is a command line shell. fish version 3.1.0 through version 3.3.1 is vulnerable to arbitrary code execution. git repositories can contain per-repository...

Linux Distros Unpatched Vulnerability : CVE-2024-24258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function. CVE-2024-24258 Note that Nessus relies on the...

CVE-2025-57770 ZITADEL user enumeration vulnerability in login UI

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Versions 4.0.0 to 4.0.2, 3.0.0 to 3.3.6, and all versions prior to 2.71.15 are vulnerable to a username enumeration issue in the login interface. The login UI includes a security...

CVE-2025-57770 ZITADEL user enumeration vulnerability in login UI

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Versions 4.0.0 to 4.0.2, 3.0.0 to 3.3.6, and all versions prior to 2.71.15 are vulnerable to a username enumeration issue in the login interface. The login UI includes a security...

Linux Distros Unpatched Vulnerability : CVE-2018-20677

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property. CVE-2018-20677 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2025-7207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability, which was classified as problematic, was found in mruby up to 3.4.0-rc2. Affected is the function scopenew of the file...

CVE-2025-53342

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GoodLayers Modernize modernize allows Stored XSS.This issue affects Modernize: from n/a through = 3.4.0...

CVE-2025-53343

Missing Authorization vulnerability in GoodLayers Modernize modernize allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Modernize: from n/a through = 3.4.0...

CVE-2025-53343

Missing Authorization vulnerability in GoodLayers Modernize modernize allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Modernize: from n/a through = 3.4.0...

CVE-2025-53342

CVE-2025-53342 is a stored XSS vulnerability in GoodLayers Modernize theme (affected: versions up to and including 3.4.0). The issue arises from improper neutralization of input during web page generation, enabling stored cross-site scripting. Public sources in the connected documents corroborate...

CVE-2025-53343 WordPress Modernize Theme <= 3.4.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in GoodLayers Modernize allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Modernize: from n/a through 3.4.0...

CVE-2025-53343 WordPress Modernize Theme <= 3.4.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in GoodLayers Modernize modernize allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Modernize: from n/a through = 3.4.0...