WordPress plugin Animation Addons for Elementor 安全漏洞

WordPress Animation Addons for Elementor plugin is an Elementor page builder extension plugin for the WordPress platform, focused on adding rich animation effects to websites. The WordPress Animation Addons for Elementor plugin suffers from a SQL injection vulnerability that stems from improper...

CVE-2025-67540: Missing Authorization

Missing Authorization vulnerability in Wealcoder Animation Addons for Elementor animation-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animation Addons for Elementor: from n/a through = 2.4.5...

EUVD-2025-201325

Malicious code in tailwindcss-animation-helper npm...

MAL-2025-192316 Malicious code in tailwindcss-animation-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481964585a35f69204d7414e9baf1d490be4d82239919026f044584bf7a64ddd The package tailwindcss-animation-helper was found to contain malicious code. Source: ghsa-malware...

Malicious code in tailwindcss-animation-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481964585a35f69204d7414e9baf1d490be4d82239919026f044584bf7a64ddd The package tailwindcss-animation-helper was found to contain malicious code. Source: ghsa-malware...

Malicious code in tailwindcss-animation-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fda6d7eaefe792f8b06f7ef177feea15d90da13962dbe59f48d7987a234aca The package tailwindcss-animation-css was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192293 Malicious code in tailwindcss-animation-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fda6d7eaefe792f8b06f7ef177feea15d90da13962dbe59f48d7987a234aca The package tailwindcss-animation-css was found to contain malicious code. Source: ghsa-malware...

GHSA-V4HV-RGFQ-GP49 Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes

A Stored Cross-Site Scripting XSS vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain...

Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes

A Stored Cross-Site Scripting XSS vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain...

CVE-2025-66412

CVE-2025-66412 concerns Angular’s Template Compiler, where a stored XSS could occur due to an incomplete security schema that fails to classify certain URL-holding attributes (e.g., javascript: URLs) as requiring strict URL security. The vulnerability allows injection of malicious scripts and is ...

CVE-2025-66412 Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting XSS vulnerability has been identified in the Angular Template Compiler. It occurs because the...

Malicious code in animation-debug-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8de5120a99a3428e311006c153a98bf97b0c46f7c9c633f241f75896adfe219 The package animation-debug-app was found to contain malicious code...

MAL-2025-191506 Malicious code in animation-debug-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8de5120a99a3428e311006c153a98bf97b0c46f7c9c633f241f75896adfe219 The package animation-debug-app was found to contain malicious code...

EUVD-2025-200063

Malicious code in animation-debug-app npm...

Malicious Package

Overview tailwindcss-react-animation is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of th...

Malicious Package

Overview tailwindcss-animation-style is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of th...

Malicious Package

Overview tailwindcss-animation-helper is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of...

Mozilla Firefox < 53.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 53.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-10 advisory. - Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. CVE-2017-5469 ...

CVE-2025-11841: Improper Neutralization of Input During Web Page Generation

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Chart Data attributes in all versions up to, and including, 12.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

PT-2025-43486

Name of the Vulnerable Software and Affected Versions KeyguardViewMediator affected versions not specified Description A logic error exists in the exitKeyguardAndFinishSurfaceBehindRemoteAnimation function within KeyguardViewMediator.java. This could allow a lockscreen bypass, potentially leading...