1709 matches found
CVE-2025-66303 Grav is vulnerable to a DOS on the admin panel
Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A Denial of Service DoS vulnerability has been identified in Grav related to the handling of scheduledat parameters. Specifically, the application fails to properly sanitize input for cron expressions. By manipulating the scheduledat...
PT-2025-48562
Name of the Vulnerable Software and Affected Versions Grav versions prior to 1.8.0-beta.27 Description Grav is susceptible to a Denial of Service DoS condition due to improper input sanitization of the scheduled at parameter when processing cron expressions. Manipulating this parameter with...
📄 FreePBX 17.0.3 SQL Injection
FreePBX version 17.0.3 proof of concept unauthenticated remote SQL injection exploit that leverages ajax.php. ============================================================================================================================================= | Title : FreePBX 17.0.3 Unauthenticated SQL...
PT-2025-47426
The Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin for WordPress is vulnerable to Authorization in versions up to, and including, 5.9.10. This is due to the plugin not properly verifying that a user is authorized to perform an action in the trigger mailing queue...
MAL-2025-187687 Malicious code in key-tree-cron-serialize-process (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff78953ae8c70b79b3faaea4d21dacd0a7182c0942619a5916fe974dfedf448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176422
Malicious code in serialize-minify-decompress-mu-cron npm...
Malicious code in protected-thread-cron-integer-alpha (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8a54f3515cbdff294501d3b30177d1f4b221d5540a7178e1efc0fbbdc57b0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178038
Malicious code in log-cron-execute-small-signal npm...
EUVD-2025-178157
Malicious code in lambda-daemon-cron-delta-link npm...
EUVD-2025-176757
Malicious code in refactor-cron-yaml-dog-debug npm...
EUVD-2025-180152
Malicious code in bad-cron-easy-daemon-compile npm...
EUVD-2025-178092
Malicious code in link-cron-simulate-assert-log npm...
EUVD-2025-179709
Malicious code in cloud-fire-grid-kernel-cron npm...
EUVD-2025-180321
Malicious code in array-eta-sudo-new-cron npm...
EUVD-2025-179508
Malicious code in cron-optimize-thread-cat-compile npm...
EUVD-2025-179685
Malicious code in cold-cron-object-chi-export npm...
EUVD-2025-177477
Malicious code in old-export-class-cron-deploy npm...
EUVD-2025-178444
Malicious code in import-proxy-cron-balance-abstract npm...
Malicious code in pi-quick-cron-book-compile (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf44e489d6db17c47113c34f0e8b7584c52a1b98fc559ea0dbd9fb498ae230f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...