EUVD-2018-8002

Malware in sbrugna...

EUVD-2020-17974

Malware in sbrugna...

EUVD-2018-8003

Malware in sbrugna...

EUVD-2019-9367

Malware in sbrugna...

EUVD-2022-32555

Malicious code in bioql PyPI...

EUVD-2022-32556

Malicious code in bioql PyPI...

SUSE-SU-2025:20805-1 Security update for podman

This update for podman fixes the following issues: - CVE-2025-6032: Fixed machine init command failing to verify TLS certificate bsc1245320 - Fix conditional Requires remove deprecated sleversion macro - Update to version 5.4.2: Add release notes for v5.4.2 Fix a potential deadlock during podman ...

Linux Distros Unpatched Vulnerability : CVE-2020-4047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In affected versions of WordPress, authenticated users with upload permissions like authors are able to inject JavaScript into some media file attachment pages ...

Linux Distros Unpatched Vulnerability : CVE-2020-4049

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In affected versions of WordPress, when uploading themes, the name of the theme folder can be crafted in a way that could lead to JavaScript execution in...

CVE-2022-28073

A use after free in rregsetvalue function in radare2 5.4.2 and 5.4.0...

CVE-2022-28068

A heap buffer overflow in rsleb128 function in radare2 5.4.2 and 5.4.0...

WordPress Mayosis Core plugin <= 5.4.1 - Unauthenticated Arbitrary File Read vulnerability

Unauthenticated Arbitrary File Read vulnerability discovered by Tonn in WordPress Plugin Mayosis Core versions = 5.4.1...

Invoke 安全漏洞

Invoke is a leading creative engine for stabilizing diffusion models open-sourced by InvokeAI. A security vulnerability exists in Invoke versions 5.3.1 through 5.4.2, which stems from improper deserialization of model files and could lead to remote code execution...

PT-2025-4839 · Github · Github

Name of the Vulnerable Software and Affected Versions: matrix-hookshot versions 5.4.1 and earlier matrix-hookshot versions 6.0.1 and earlier Description: The issue is related to a Denial of Service DoS condition that can occur when the software is configured with GitHub support. This happens due ...

Files or Directories Accessible to External Parties

Overview craftcms/cms is a content management system. Affected versions of this package are vulnerable to Files or Directories Accessible to External Parties by abusing the mail notification template via the dataUrl function. Note: This is only exploitable when the attacker have write permissions...

JVN#87710540: Assimp vulnerable to heap-based buffer overflow

Assimp provided by Open Asset Import Library contains a heap-based buffer overflow vulnerability CWE-122. Impact An attacker may execute arbitrary code by inputting a specially crafted file into the product. Solution Update the Software Update the software to the latest version according to the...

OPENSUSE-SU-2024:10800-1 gnuplot-5.4.2-1.3 on GA media

These are all security issues fixed in the gnuplot-5.4.2-1.3 package on the GA media of openSUSE Tumbleweed...

CVE-2024-2785

The The Plus Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Age Gate widget in all versions up to, and including, 5.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

WordPress plugin The Plus Addons for Elementor 安全漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerabilit...

PT-2024-15566 · WordPress · The Plus Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Plus Addons for Elementor plugin for WordPress versions up to, and including, 5.4.2 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping in the plugin's element...