CVE-2025-5394

CVE-2025-5394 – WordPress Alone テーマ = 7.8.3 - プラグインインストール経由の未認証の任意ファイルアップロード 🔥 脆弱性概要 WordPress テーマ Alone のバージョン = 7.8.3 には、未認証の任意ファイルアップロード の脆弱性があります。この欠陥により、未認証の攻撃者 が保護されていない AJAX エンドポイントを介してリモート URL から任意のプラグイン ZIP ファイルをアップロード・インストールできるようになり、バックドア化されたプラグインを展開することで リモートコード実行（RCE） につながります。...

CVE-2025-5394

CVE-2025-5394 CVE‑2025‑5394 WP Alone theme ≤ 7.8.3...

CVE-2025-5394

🚨 CVE-2025-5394 - Aloneテーマにおける未認証の任意プラグインアップロード 📌 影響を受ける製品: Alone – チャリティ多目的非営利WordPressテーマ バージョン: 🚀 使用例: root@kitploit: python3 CVE-2025-5394.py -help root@kitploit: usage: CVE-2025-5394.py -h -u URL -s SHELL CVE-2025-5394 Exploit | by Khaled Alenazi Nxploited options: -h, --help show this help...

[SECURITY] Fedora 44 Update: perl-PAR-Packer-1.064-6.fc44

This module implements the App::Packer::Backend interface, for generating stand-alone executables, perl scripts and PAR files...

[R4] Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2 and 6.8.0: SC202607.1

R4 Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2 and 6.8.0: SC202607.1 Arnie Cabral Mon, 07/20/2026 - 13:01 Security Center leverages third-party software to help provide underlying functionality. Several of the third-party components apache, OpenSSL,...

[SECURITY] Fedora 42 Update: perl-PAR-Packer-1.064-3.fc42

This module implements the App::Packer::Backend interface, for generating stand-alone executables, perl scripts and PAR files...

[SECURITY] Fedora 43 Update: kea-3.0.3-1.fc43

DHCP implementation from Internet Systems Consortium, Inc. that features fully functional DHCPv4, DHCPv6 and Dynamic DNS servers. Both DHCP servers fully support server discovery, address assignment, renewal, rebinding and release. The DHCPv6 server supports prefix delegation. Both servers suppor...

[R2] Stand-alone Security Patch Available for Tenable Security Center Versions 6.5.1, 6.6.0, 6.7.2 and 6.8.0: SC202604.1

R2 Stand-alone Security Patch Available for Tenable Security Center Versions 6.5.1, 6.6.0, 6.7.2 and 6.8.0: SC202604.1 Aaron Roy Tue, 04/07/2026 - 11:35 Security Center leverages third-party software to help provide underlying functionality. A third-party component PostgreSQL was found to contain...

Exploit for CVE-2025-5394

CVE-2025-5394 Alone – Charity Mu...

EUVD-2025-75027

Malicious code in aloneraven-smiletea npm...

EUVD-2025-77778

Malicious code in alonebonoboz3n npm...

MAL-2025-99363 Malicious code in alone_bonobo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59b844f94fb2cef112a46818136d7b9e6cddaa30e2794ccfae5719e305b1bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-71676

Malicious code in alonemosquitoz3n npm...

Malicious code in alone_wren_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ae46fb60078832b26d79badd98afb8dd04c96b77d96b45ec7c9e59aaddeb1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55901

Malicious code in alone-magenta-newt npm...

EUVD-2025-55902

Malicious code in alone-amber-turkey npm...

EUVD-2025-50715

Malicious code in alonedragonz3n npm...

Malicious code in alone_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff615df318bf587283748be76e6cff4f8b9ad8a8b711fd7df5cd3aacaed22547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50716

Malicious code in alonedovez3n npm...

MAL-2025-59952 Malicious code in alone_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff615df318bf587283748be76e6cff4f8b9ad8a8b711fd7df5cd3aacaed22547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...