5750 matches found
WordPress plugin Safe Ai Malware Protection for WP 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
CVE-2025-0374: Incorrect Permission Assignment for Critical Resource
When etcupdate encounters conflicts while merging files, it saves a version containing conflict markers in /var/db/etcupdate/conflicts. This version does not preserve the mode of the input file, and is world-readable. This applies to files that would normally have restricted visibility, such as...
Malicious code in meli-db (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10e8951862693cd7f0abc511b5294f748fc5ebafd51d1e36a87114d2583d1221 The OpenSSF Package Analysis project identified 'meli-db' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
MAL-2025-552 Malicious code in meli-db (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10e8951862693cd7f0abc511b5294f748fc5ebafd51d1e36a87114d2583d1221 The OpenSSF Package Analysis project identified 'meli-db' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in lyft-db (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f37cced5f60e41888f8d0a2a4472279034b4fd9a0f6076ea9337095dc37cea9f The OpenSSF Package Analysis project identified 'lyft-db' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
MAL-2025-529 Malicious code in lyft-db (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f37cced5f60e41888f8d0a2a4472279034b4fd9a0f6076ea9337095dc37cea9f The OpenSSF Package Analysis project identified 'lyft-db' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
MAL-2025-463 Malicious code in godaddy-db (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e568233ece9ccf22e2b6cae72c8d894671a304107b170444f0d43d8692bf31a4 The OpenSSF Package Analysis project identified 'godaddy-db' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
MAL-2025-377 Malicious code in amazon-db (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b2f3fdc024f82b11d080d27e18dfe206e477583ec84c8f2268b9e275c9bb36d7 The OpenSSF Package Analysis project identified 'amazon-db' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
Cross-Site Request Forgery (CSRF)
typo3/cms-lowlevel is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to improper handling of deep links in the backend user interface, caused by insufficient enforcement of HTTP methods and reliance on misconfigured security settings and allows an attacker to manipulate...
CVE-2024-55945
CVE-2024-55945 affects TYPO3 (notably the DB Check Module in the TYPO3 backend). The issue is a CSRF vulnerability in deep-linking that can enable state-changing actions to be performed via unauthorized submissions, if an attacker lures a logged-in backend user to a malicious URL. Exploitation re...
CVE-2024-55945 Cross-Site Request Forgery in DB Check Module in TYPO3
TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery CSRF. Additionally, state-changing actions in downstrea...
CVE-2024-55945 Cross-Site Request Forgery in DB Check Module in TYPO3
TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery CSRF. Additionally, state-changing actions in downstrea...
GHSA-8MV3-37RC-PVXJ TYPO3 DB Check Module vulnerable to Cross-Site Request Forgery
Problem A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery CSRF. Additionally, state-changing actions in downstream components incorrectly accepted submissions via HTTP...
Exposed Dangerous Method or Function
Overview typo3/cms-lowlevel is an Enables the 'Config' and 'DB Check' modules for technical analysis of the system. This includes raw database search, checking relations, counting pages and records etc. Affected versions of this package are vulnerable to Exposed Dangerous Method or Function via t...
PT-2025-3160
Name of the Vulnerable Software and Affected Versions TYPO3 versions prior to 11.5.42 ELTS Description A vulnerability has been identified in the backend user interface functionality involving deep links, which is susceptible to Cross-Site Request Forgery CSRF. State-changing actions in downstrea...
CVE-2024-55945: Cross-Site Request Forgery (CSRF)
TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery CSRF. Additionally, state-changing actions in downstrea...
CVE-2025-22586
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dstoever WPEX Replace DB Urls wpex-replace allows Reflected XSS.This issue affects WPEX Replace DB Urls: from n/a through = 0.4.0...
CVE-2025-22586 WordPress WPEX Replace DB Urls Plugin <= 0.4.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dstoever WPEX Replace DB Urls wpex-replace allows Reflected XSS.This issue affects WPEX Replace DB Urls: from n/a through = 0.4.0...
CVE-2025-22586: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dstoever WPEX Replace DB Urls wpex-replace allows Reflected XSS.This issue affects WPEX Replace DB Urls: from n/a through = 0.4.0...
