CVE-2025-14947 All-in-One Video Gallery <= 4.6.4 - Missing Authorization to Unauthenticated Bunny Stream Video Creation/Deletion

The All-in-One Video Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxcallbackcreatebunnystreamvideo, ajaxcallbackgetbunnystreamvideo, and ajaxcallbackdeletebunnystreamvideo functions in all versions up to, and including,...

GHSA-C32P-WCQJ-J677 CometBFT has inconsistencies between how commit signatures are verified and how block time is derived

CSA-2026-001: Tachyon Description Name: CSA-2026-001: Tachyon Criticality: Critical Catastrophic Impact; Possible Likelihood per ACMv1.2 Affected versions: All versions of CometBFT Affected users: Validators and protocols relying on block timestamps Description A consensus-level vulnerability was...

CometBFT has inconsistencies between how commit signatures are verified and how block time is derived

CSA-2026-001: Tachyon Description Name: CSA-2026-001: Tachyon Criticality: Critical Catastrophic Impact; Possible Likelihood per ACMv1.2 Affected versions: All versions of CometBFT Affected users: Validators and protocols relying on block timestamps Description A consensus-level vulnerability was...

WordPress All-in-One Video Gallery plugin <= 4.6.4 - Missing Authorization to Unauthenticated Bunny Stream Video Creation/Deletion vulnerability

Missing Authorization to Unauthenticated Bunny Stream Video Creation/Deletion vulnerability discovered by andrea bocchetti in WordPress Plugin All-in-One Video Gallery versions = 4.6.4...

Malicious Package

Overview ntwsc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

PT-2026-4521

Name of the Vulnerable Software and Affected Versions All-in-One Video Gallery plugin for WordPress versions through 4.6.4 Description The All-in-One Video Gallery plugin for WordPress is susceptible to unauthorized data modification because of a missing capability check on the ajax callback crea...

WordPress plugin All-in-One Video Gallery has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

CVE-2025-14947: Missing Authorization

The All-in-One Video Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxcallbackcreatebunnystreamvideo, ajaxcallbackgetbunnystreamvideo, and ajaxcallbackdeletebunnystreamvideo functions in all versions up to, and including,...

Malicious Package

Overview @brl-laiwb/ng-laiwb-api is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious Package

Overview csv-parsing-xz is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview csv-parsing-xx is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

org.keycloak:keycloak-dependencies-server-all (1.9.0.cr1), org.keycloak:keycloak-dependencies-server-min (1.9.0.cr1) +2 more potentially affected by CVE-2025-14083 via org.keycloak:keycloak-services (1.9.0.cr1)

org.keycloak:keycloak-services MAVEN version 1.9.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.0.cr1 -...

org.keycloak:keycloak-authz-policy-drools (2.0.0.final), org.keycloak:keycloak-dependencies-server-all (2.0.0.final) +3 more potentially affected by CVE-2025-14083 via org.keycloak:keycloak-services (2.0.0.final)

org.keycloak:keycloak-services MAVEN version 2.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.0.0.final -...

org.keycloak:keycloak-account-freemarker (1.5.0.final), org.keycloak:keycloak-broker-oidc (1.5.0.final) +8 more potentially affected by CVE-2025-14083 via org.keycloak:keycloak-services (1.5.0.final)

org.keycloak:keycloak-services MAVEN version 1.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.5.0.final - org.keycloak:keycloak-broker-oidc...

org.keycloak:keycloak-authz-policy-drools (8.0.0), org.keycloak:keycloak-dependencies-server-all (8.0.0) +7 more potentially affected by CVE-2025-14083 via org.keycloak:keycloak-services (8.0.0)

org.keycloak:keycloak-services MAVEN version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 8.0.0 - org.keycloak:keycloak-dependencies-server-all 8.0...

org.keycloak:keycloak-dependencies-server-all (1.9.8.final), org.keycloak:keycloak-dependencies-server-min (1.9.8.final) +2 more potentially affected by CVE-2025-14083 via org.keycloak:keycloak-services (1.9.8.final)

org.keycloak:keycloak-services MAVEN version 1.9.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.8.final -...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (>=1.1.0-beta.3, <=1.1.3.final), org.keycloak:keycloak-account-freemarker (1.3.1.final) +9 more potentially affected by CVE-2025-14083 via org.keycloak:keycloak-services (1.3.1.final)

org.keycloak:keycloak-services MAVEN version 1.3.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server =1.1.0-beta.3, =1.1.3.final -...

org.keycloak:keycloak-account-freemarker (1.5.1.final), org.keycloak:keycloak-broker-oidc (1.5.1.final) +8 more potentially affected by CVE-2025-14083 via org.keycloak:keycloak-services (1.5.1.final)

org.keycloak:keycloak-services MAVEN version 1.5.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.5.1.final - org.keycloak:keycloak-broker-oidc...

org.keycloak:keycloak-authz-policy-drools (3.2.1.final), org.keycloak:keycloak-dependencies-server-all (3.2.1.final) +6 more potentially affected by CVE-2025-14083 via org.keycloak:keycloak-services (3.2.1.final)

org.keycloak:keycloak-services MAVEN version 3.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.2.1.final -...

org.keycloak:keycloak-dependencies-server-all (1.9.0.final), org.keycloak:keycloak-dependencies-server-min (1.9.0.final) +2 more potentially affected by CVE-2025-14083 via org.keycloak:keycloak-services (1.9.0.final)

org.keycloak:keycloak-services MAVEN version 1.9.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.0.final -...