28470 matches found
CVE-2025-10127
creationtimestamp| type| source ---|---|--- 2025-09-11 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-254-10 2025-09-11 20:03:06+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lylk5btbwa26 2025-09-13 01:37:20+00:00| seen|...
CVE-2025-8392
The Mitfahrgelegenheit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...
CVE-2025-9123
creationtimestamp| type| source ---|---|--- 2025-09-11 07:36:53+00:00| seen| Telegram/4zyvQ36OasQaiXXBi-XS6orPBC3L6BdwAS3ORhIHRYvE6wE...
CVE-2025-8392 Mitfahrgelegenheit <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via date Parameter
The Mitfahrgelegenheit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...
CVE-2025-8392
CVE-2025-8392 affects the Mitfahrgelegenheit WordPress plugin. It allows stored XSS via the date parameter in versions up to 1.1.5 . Exploitation requires Contributor+ authentication. The vulnerability is listed with an Unpatched status in the provided details; a patch tag exists (1.1.5) in the r...
CVE-2025-8392 Mitfahrgelegenheit <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via date Parameter
The Mitfahrgelegenheit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...
Malicious code in @google_cloud/precise-date (npm)
The package @googlecloud/precise-date was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fe210b8cac7607562aceba7accb395f7d72480112abadec2545c8863f9029ac Any computer that has this package installed or running should be considered...
Malicious Package
Overview @googlecloud/precise-date is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malware in @google_cloud/precise-date
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-47029 Malicious code in @google_cloud/precise-date (npm)
The package @googlecloud/precise-date was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fe210b8cac7607562aceba7accb395f7d72480112abadec2545c8863f9029ac Any computer that has this package installed or running should be considered...
CVE-2025-10245
creationtimestamp| type| source ---|---|--- 2025-09-11 03:07:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyjrenwivk2c...
CVE-2025-6088
creationtimestamp| type| source ---|---|--- 2025-09-11 02:46:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyjq72f4dg2t...
PT-2025-37125
The Mitfahrgelegenheit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...
CVE-2025-8392: Improper Neutralization of Input During Web Page Generation
The Mitfahrgelegenheit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...
WordPress plugin "Mitfahrgelegenheit" has a cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
VulnCheck KEV: CVE-2021-37538
Multiple SQL injection vulnerabilities in SmartDataSoft SmartBlog for PrestaShop before 4.06 allow a remote unauthenticated attacker to execute arbitrary SQL commands via the day, month, or year parameter to the controllers/front/archive.php archive controller, or the idcategory parameter to the...
CVE-2025-10099
A weakness has been identified in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/educarusuariocad.php of the component Editar usuário Page. This manipulation of the argument email/datainicial/dataexpiracao causes cross site...
CVE-2025-58989
creationtimestamp| type| source ---|---|--- 2025-09-10 18:38:10+00:00| seen| Telegram/Pzrec53G8H2Sva5BmDzA24MSMh8QddRyHGtkjfBEu9Y70FI...
CVE-2025-9712
creationtimestamp| type| source ---|---|--- 2025-09-10 12:50:30+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lyibipcqas2x 2025-09-11 03:14:55+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lyjrshhuzs2v...