AZL-60429 CVE-2025-32907 affecting package libsoup for versions less than 3.0.4-7

A flaw was found in libsoup. The implementation of HTTP range requests is vulnerable to a resource consumption attack. This flaw allows a malicious client to request the same range many times in a single HTTP request, causing the server to use large amounts of memory. This does not allow for a fu...

Oracle Linux 7 : grub2 (ELSA-2025-3396)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3396 advisory. - Fix OOB write in grubnetsearchconfigfile CVE-2025-0624 Orabug: 37770226 Tenable has extracted the preceding description block directly from the Oracle Linux...

RHEL 7 : firefox (RHSA-2025:3628)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:3628 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

RHEL 7 : libxslt (RHSA-2025:3612)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3612 advisory. libxslt is a library for transforming XML files into other textual formats including HTML, plain text, and other XML representations of the...

CVE-2025-32679

Cross-Site Request Forgery CSRF vulnerability in ZealousWeb User Registration Using Contact Form 7 user-registration-using-contact-form-7 allows Cross Site Request Forgery.This issue affects User Registration Using Contact Form 7: from n/a through = 2.4...

PT-2025-31627

Уязвимость SCADA-системы TRACE MODE 7 связана с хранением конфиденциальной информации в незашифрованном виде в памяти. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный доступ к защищаемой информации...

CVE-2025-32679

Cross-Site Request Forgery CSRF vulnerability in ZealousWeb User Registration Using Contact Form 7 user-registration-using-contact-form-7 allows Cross Site Request Forgery.This issue affects User Registration Using Contact Form 7: from n/a through = 2.4...

CVE-2025-32679

CVE-2025-32679 is a CSRF vulnerability in the WordPress plugin User Registration Using Contact Form 7 (affected through version 2.2, with n/a as starting version). The issue is documented as a Cross-Site Forgery vulnerability, and according to Wordfence Intelligence, the patch status is Unpatched...

CVE-2025-32679 WordPress User Registration Using Contact Form 7 plugin <= 2.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ZealousWeb User Registration Using Contact Form 7 user-registration-using-contact-form-7 allows Cross Site Request Forgery.This issue affects User Registration Using Contact Form 7: from n/a through = 2.4...

WordPress User Registration Using Contact Form 7 plugin <= 2.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin User Registration Using Contact Form 7 versions = 2.4...

PT-2025-15823

Name of the Vulnerable Software and Affected Versions: ZealousWeb User Registration Using Contact Form 7 versions n/a through 2.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For versions n/a through 2.2, upda...

WordPress plugin User Registration Using Contact Form 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in WordPress plugin User...

CVE-2025-32679: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ZealousWeb User Registration Using Contact Form 7 user-registration-using-contact-form-7 allows Cross Site Request Forgery.This issue affects User Registration Using Contact Form 7: from n/a through = 2.4...

AZL-59656 CVE-2025-22871 affecting package golang for versions less than 1.18.8-7

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext...

AZL-59722 CVE-2025-32414 affecting package libxml2 for versions less than 2.10.4-7

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API Python bindings because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters...

CVE-2025-26682

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

PT-2025-15415

Name of the Vulnerable Software and Affected Versions: Accept SagePay Payments Using Contact Form 7 plugin for WordPress versions 2.0 and earlier Description: The issue allows unauthenticated attackers to view potentially sensitive information contained in an exposed file through the publicly...

CVE-2025-2883: Exposure of Sensitive Information to an Unauthorized Actor

The Accept SagePay Payments Using Contact Form 7 plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive...

WordPress Accept SagePay Payments Using Contact Form 7 plugin <= 2.0 - Unauthenticated Information Exposure vulnerability

Unauthenticated Information Exposure vulnerability discovered by Avraham Shemesh in WordPress Plugin Accept SagePay Payments Using Contact Form 7 versions = 2.0...

CVE-2025-3352

creationtimestamp| type| source ---|---|--- 2025-04-07 13:45:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10703 2025-04-07 17:04:16+00:00| seen| https://t.me/cvedetector/22311...