EUVD-2025-13312

Malicious code in bioql PyPI...

CVE-2025-4198

The Alink Tap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.1. This is due to missing or incorrect nonce validation on the 'alink-tap' page. This makes it possible for unauthenticated attackers to update settings and inject malicious we...

CVE-2025-4198 Alink Tap <= 1.3.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Alink Tap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.1. This is due to missing or incorrect nonce validation on the 'alink-tap' page. This makes it possible for unauthenticated attackers to update settings and inject malicious we...

CVE-2025-4198

CVE-2025-4198 – Alink Tap (WordPress) CSRF to Stored XSS . Affected: Alink Tap plugin for WordPress versions up to and including 1.3.1. Root cause: missing/incorrect nonce validation on the alink-tap page enables Cross-Site Request Forgery. Impact (per sources): unauthenticated attackers can upda...

CVE-2025-4198 Alink Tap <= 1.3.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

The Alink Tap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.1. This is due to missing or incorrect nonce validation on the 'alink-tap' page. This makes it possible for unauthenticated attackers to update settings and inject malicious we...

PT-2025-18934 · WordPress · Alink Tap

Name of the Vulnerable Software and Affected Versions: Alink Tap plugin for WordPress versions up to, and including, 1.3.1 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'alink-tap' page. This allows unauthenticated attackers to...

CVE-2025-4198: Cross-Site Request Forgery (CSRF)

The Alink Tap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.1. This is due to missing or incorrect nonce validation on the 'alink-tap' page. This makes it possible for unauthenticated attackers to update settings and inject malicious we...

WordPress plugin Alink Tap 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress Alink Tap plugin <= 1.3.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability

Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin Alink Tap versions = 1.3.1...

The vulnerability of the alink attribute in the sailfish-browser application for the “Avora” operating system, which is related to overflowing the dynamically allocated buffer, allows a hacker to cause a service failure.

The vulnerability of the alink attribute in the sailfish-browser application for the “Avroda” operating system is related to a buffer overflow in the dynamically allocated buffer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Apple iOS Safari - body alink Remote Crash

----------------------------------- Exploit Title: Apple iPhone Safari body alink Remote Crash Date: 19/12/2010 Author: Pr0T3cT10n Affected Version: IOS 4.0.1 Tested on Apple iPhone 3, IOS 4.0.1 MobileSafari Launch Safari, point your browser to the page and safari will crash. ISRAEL,...

Apple iOS Safari - body alink Remote Crash

Apple iOS Safari - body alink Remote Crash ----------------------------------- Exploit Title: Apple iPhone Safari body alink Remote Crash Date: 19/12/2010 Author: Pr0T3cT10n Affected Version: IOS 4.0.1 Tested on Apple iPhone 3, IOS 4.0.1 MobileSafari Launch Safari, point your browser to the page...

Apple iPhone Safari Denial Of Service

----------------------------------- Exploit Title: Apple iPhone Safari body alink Remote Crash Date: 19/12/2010 Author: Pr0T3cT10n Affected Version: IOS 4.0.1 Tested on Apple iPhone 3, IOS 4.0.1 MobileSafari Launch Safari, point your browser to the page and safari will crash. ISRAEL,...

Apple Safari WebKit Property Memory Leak Remote DoS Vulnerability

The host is installed with Apple Safari web browser and is prone to denial of service. OpenVAS Vulnerability Test $Id: gbapplesafarimemleakdosvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Apple Safari WebKit Property Memory Leak Remote DoS Vulnerability Authors: Chandan S Copyright: Copyright c 20...

Apple Safari WebKit alink属性内存泄露拒绝服务漏洞

BUGTRAQ ID: 33080 CVECAN ID: CVE-2008-5821 Safari是苹果操作系统中所默认捆绑的WEB浏览器。 Safari所使用的WebKit（WebKit.dll）中存在内存泄露漏洞。如果用户受骗打开的HTML文档中BODY单元包含有超长的ALINK属性的话，就可以触发这个漏洞，导致浏览器由于内存耗尽而崩溃。 Apple Safari 3.2 - Microsoft Windows Vista 厂商补丁： Apple ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2008-5821

Memory leak in WebKit.dll in WebKit, as used by Apple Safari 3.2 on Windows Vista SP1, allows remote attackers to cause a denial of service memory consumption and browser crash via a long ALINK attribute in a BODY element in an HTML document...

CVE-2002-0693: Undefined Security Weakness

Buffer overflow in the HTML Help ActiveX Control hhctrl.ocx in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via 1 a long parameter to the Alink function, or 2 script...