CVE-2025-66224 OrangeHRM is Vulnerable to Code Execution Through Arbitrary File Write from Sendmail Parameter Injection

OrangeHRM is a comprehensive human resource management HRM system. From version 5.0 to 5.7, the application contains an input-neutralization flaw in its mail configuration and delivery workflow that allows user-controlled values to flow directly into the system’s sendmail command. Because these...

EUVD-2021-25584

Malware in sbrugna...

EUVD-2021-16511

Malware in sbrugna...

EUVD-2019-12412

Malware in sbrugna...

EUVD-2020-22388

Malware in sbrugna...

EUVD-2001-0685

Malware in sbrugna...

EUVD-2021-25583

Malware in sbrugna...

EUVD-2022-26732

Malicious code in bioql PyPI...

EUVD-2025-7824

Malicious code in bioql PyPI...

EUVD-2021-28278

Malicious code in bioql PyPI...

EUVD-2024-35070

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-39203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. In affected versions authenticated use...

Malicious code in typescript-5.8 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e5beba7c2e6c6b468d2708bf24ba287dcdd016c8345420d5535bf883e8158af9 The OpenSSF Package Analysis project identified 'typescript-5.8' @...

Linux Distros Unpatched Vulnerability : CVE-2021-39201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Impact The issue allows an authenticat...

Linux Distros Unpatched Vulnerability : CVE-2020-15436

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free vulnerability in fs/blockdev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging...

CVE-2025-50017

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matt WP Voting Contest wp-voting-contest allows Stored XSS.This issue affects WP Voting Contest: from n/a through = 5.8...

CVE-2025-50017 WordPress WP Voting Contest plugin <= 5.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matt WP Voting Contest wp-voting-contest allows Stored XSS.This issue affects WP Voting Contest: from n/a through = 5.8...

SUSE: Security Advisory (SUSE-SU-2025:0425-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-41175

Pi-hole's Web interface based on AdminLTE provides a central location to manage one's Pi-hole and review the statistics generated by FTLDNS. Prior to version 5.8, cross-site scripting is possible when adding a client via the groups-clients management page. This issue was patched in version 5.8...

CVE-2021-39203

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. In affected versions authenticated users who don't have permission to view private post types/data can bypass restrictions in the block editor under certain conditions. This...