34826 matches found
RHEL 7 : firefox (RHSA-2025:3628)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:3628 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...
CVE-2025-32679
Cross-Site Request Forgery CSRF vulnerability in ZealousWeb User Registration Using Contact Form 7 user-registration-using-contact-form-7 allows Cross Site Request Forgery.This issue affects User Registration Using Contact Form 7: from n/a through = 2.4...
PT-2025-31627
Уязвимость SCADA-системы TRACE MODE 7 связана с хранением конфиденциальной информации в незашифрованном виде в памяти. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный доступ к защищаемой информации...
CVE-2025-32679
Cross-Site Request Forgery CSRF vulnerability in ZealousWeb User Registration Using Contact Form 7 user-registration-using-contact-form-7 allows Cross Site Request Forgery.This issue affects User Registration Using Contact Form 7: from n/a through = 2.4...
CVE-2025-32679
CVE-2025-32679 is a CSRF vulnerability in the WordPress plugin User Registration Using Contact Form 7 (affected through version 2.2, with n/a as starting version). The issue is documented as a Cross-Site Forgery vulnerability, and according to Wordfence Intelligence, the patch status is Unpatched...
CVE-2025-32679 WordPress User Registration Using Contact Form 7 plugin <= 2.4 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in ZealousWeb User Registration Using Contact Form 7 user-registration-using-contact-form-7 allows Cross Site Request Forgery.This issue affects User Registration Using Contact Form 7: from n/a through = 2.4...
WordPress User Registration Using Contact Form 7 plugin <= 2.4 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin User Registration Using Contact Form 7 versions = 2.4...
PT-2025-15823
Name of the Vulnerable Software and Affected Versions: ZealousWeb User Registration Using Contact Form 7 versions n/a through 2.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For versions n/a through 2.2, upda...
WordPress plugin User Registration Using Contact Form 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in WordPress plugin User...
CVE-2025-32679: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in ZealousWeb User Registration Using Contact Form 7 user-registration-using-contact-form-7 allows Cross Site Request Forgery.This issue affects User Registration Using Contact Form 7: from n/a through = 2.4...
AZL-59656 CVE-2025-22871 affecting package golang for versions less than 1.18.8-7
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext...
AZL-59722 CVE-2025-32414 affecting package libxml2 for versions less than 2.10.4-7
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API Python bindings because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters...
CVE-2025-26682
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
PT-2025-15415
Name of the Vulnerable Software and Affected Versions: Accept SagePay Payments Using Contact Form 7 plugin for WordPress versions 2.0 and earlier Description: The issue allows unauthenticated attackers to view potentially sensitive information contained in an exposed file through the publicly...
CVE-2025-2883: Exposure of Sensitive Information to an Unauthorized Actor
The Accept SagePay Payments Using Contact Form 7 plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive...
WordPress Accept SagePay Payments Using Contact Form 7 plugin <= 2.0 - Unauthenticated Information Exposure vulnerability
Unauthenticated Information Exposure vulnerability discovered by Avraham Shemesh in WordPress Plugin Accept SagePay Payments Using Contact Form 7 versions = 2.0...
CVE-2025-3352
creationtimestamp| type| source ---|---|--- 2025-04-07 13:45:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10703 2025-04-07 17:04:16+00:00| seen| https://t.me/cvedetector/22311...
CVE-2025-32269
Cross-Site Request Forgery CSRF vulnerability in CRM Perks WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms cf7-zendesk allows Cross Site Request Forgery.This issue affects WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms: from n/a through...
CVE-2025-32126
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in cmsMinds Pay with Contact Form 7 pay-with-contact-form-7 allows SQL Injection.This issue affects Pay with Contact Form 7: from n/a through = 1.0.4...
RHEL 7 : grub2 (RHSA-2025:3396)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3396 advisory. The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular...