4258 matches found
CVE-2025-57886 WordPress Accessibility Checker by Equalize Digital Plugin <= 1.30.0 - Insecure Direct Object References (IDOR) Vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Equalize Digital Accessibility Checker by Equalize Digital accessibility-checker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Checker by Equalize Digital: from n/a through...
CVE-2025-57886
CVE-2025-57886 (WordPress) – Equalize Digital Accessibility Checker . Affected plugin: Equalize Digital Accessibility Checker, versions up to 1.30.0. Root cause: authorization bypass via a user-controlled key caused by incorrectly configured access control levels, enabling bypass of access restri...
WordPress plugin Accessibility Checker by Equalize Digital 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on servers running PHP and MySQL. A security vulnerability exists in WordPress...
PT-2025-34351 · Unknown · Accessibility Checker By Equalize Digital
Name of the Vulnerable Software and Affected Versions: Equalize Digital Accessibility Checker versions through 1.30.0 Description: An authorization bypass issue exists in Equalize Digital Accessibility Checker due to incorrectly configured access control security levels. The issue allows...
CVE-2025-57886: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in Equalize Digital Accessibility Checker by Equalize Digital accessibility-checker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Checker by Equalize Digital: from n/a through...
The vulnerability of the setWiFiMeshName function in the TOTOLink T10 mesh system, which allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the setWiFiAclRules function /cgi-bin/cstecgi.cgi in the TOTOLink T10 mesh system is caused by buffer overflow. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the web interface of Draytek Vigor Access Point software lies in the use of strictly encrypted credentials. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the web interface of Draytek Vigor Access Point software lies in the use of strictly encrypted login credentials. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of Core Services components in embedded Qualcomm software allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Core Services components in embedded Qualcomm software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the Camera component in the microprogramming software of Qualcomm’s integrated chips allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Camera component in the microprogramming software of Qualcomm embedded chips relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of the...
Malicious code in @accessibility-insights/eslint-plugin (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13389b293a7327d7df367607af4b7dea1b206ee10aecdb3c32bf093402b6247e The OpenSSF Package Analysis project identified...
MAL-2025-6899 Malicious code in @accessibility-insights/eslint-plugin (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13389b293a7327d7df367607af4b7dea1b206ee10aecdb3c32bf093402b6247e The OpenSSF Package Analysis project identified...
Linux Distros Unpatched Vulnerability : CVE-2024-10459
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash. This vulnerability affects Firefox 13...
Linux Distros Unpatched Vulnerability : CVE-2021-29970
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash. This bug could only be triggered when...
Malicious code in com.apple.unityplugin.accessibility (npm)
The package com.apple.unityplugin.accessibility was found to contain malicious code...
Malicious code in gestalt-accessibility-token (npm)
The package gestalt-accessibility-token was found to contain malicious code...
Malicious code in react-radio-group-a11y (npm)
The package react-radio-group-a11y was found to contain malicious code...
MAL-2025-17306 Malicious code in com.apple.unityplugin.accessibility (npm)
The package com.apple.unityplugin.accessibility was found to contain malicious code...
MAL-2025-39375 Malicious code in wm-plugin-accessibility (npm)
The package wm-plugin-accessibility was found to contain malicious code...