EUVD-2025-26972

Malicious code in bioql PyPI...

CVE-2025-58806

Cross-Site Request Forgery CSRF vulnerability in Tom Longridge WordPress Error Monitoring by Bugsnag bugsnag allows Stored XSS.This issue affects WordPress Error Monitoring by Bugsnag: from n/a through = 1.6.3...

CVE-2025-58806

Cross-Site Request Forgery CSRF vulnerability in Tom Longridge WordPress Error Monitoring by Bugsnag bugsnag allows Stored XSS.This issue affects WordPress Error Monitoring by Bugsnag: from n/a through = 1.6.3...

CVE-2025-58806 WordPress WordPress Error Monitoring by Bugsnag Plugin <= 1.6.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Tom Longridge WordPress Error Monitoring by Bugsnag bugsnag allows Stored XSS.This issue affects WordPress Error Monitoring by Bugsnag: from n/a through = 1.6.3...

CVE-2025-58806 WordPress WordPress Error Monitoring by Bugsnag Plugin <= 1.6.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Tom Longridge WordPress Error Monitoring by Bugsnag bugsnag allows Stored XSS.This issue affects WordPress Error Monitoring by Bugsnag: from n/a through = 1.6.3...

CVE-2025-58806

CVE-2025-58806 affects the WordPress plugin “BugSnag Error Monitoring” (WordPress Error Monitoring by Bugsnag). The vulnerability is a CSRF that also enables stored XSS, affecting versions up to and including 1.6.3 (from n/a through 1.6.3). The CVSS base vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C...

WordPress WordPress Error Monitoring by Bugsnag Plugin <= 1.6.3 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin WordPress Error Monitoring by Bugsnag versions = 1.6.3...

PT-2025-36145

Name of the Vulnerable Software and Affected Versions: imjoehaines WordPress Error Monitoring by Bugsnag versions through 1.6.3 Description: The software contains a Cross-Site Request Forgery CSRF vulnerability that also allows for Stored Cross-Site Scripting XSS. Recommendations: Update...

WordPress plugin WordPress Error Monitoring by Bugsnag 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin WordPress Error Monitoring by...

Malicious code in bugsnag-plugin-react (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5805 Malicious code in bugsnag-plugin-react (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @harrysforge/gatsby-plugin-bugsnag (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50cfb74b7280a6b4678523b7822c12d047a189fad85f0961cf1c2c943708d360 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3386 Malicious code in glip-integration-bugsnag (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e020d4fb98e12a0ab4d7269fe953ccd7c86fb2cf1e53f4bf9cc66a4e8c27076 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in glip-integration-bugsnag (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e020d4fb98e12a0ab4d7269fe953ccd7c86fb2cf1e53f4bf9cc66a4e8c27076 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Doppler VDP: Stored XSS in [https://dashboard.doppler.com/workplace/*/logs] pages

Summary: I have found a stored XSS vulnerability in the following config setting page. https://dashboard.doppler.com/workplace//projects/example-project/configs/dev/logs When you invite other users to the workspace, the xss could be used to exploit other users also. Steps To Reproduce: 1 . Visit...

Bugsnag - Critical - Unsupported - SA-CONTRIB-2019-081

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: https://www.drupal.org/node/251466procedure---own-project---unsupported...

Secret: secret app for iOS and android is sending some info over HTTP

POC for android: POST /metrics HTTP/1.1 Content-Type: application/json User-Agent: Dalvik/1.6.0 Linux; U; Android 4.2.2; googlesdk Build/JBMR1.1 Host: notify.bugsnag.com Connection: Keep-Alive Accept-Encoding: gzip Content-Length: 468...