CVE-2024-12786

A vulnerability, which was classified as critical, was found in X1a0He Adobe Downloader up to 1.3.1 on macOS. Affected is the function shouldAcceptNewConnection of the file com.x1a0he.macOS.Adobe-Downloader.helper of the component XPC Service. The manipulation leads to improper privilege...

CVE-2024-54322

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ederson Peka Media Downloader media-downloader allows Reflected XSS.This issue affects Media Downloader: from n/a through = 0.4.7.4...

CVE-2024-51654

Cross-Site Request Forgery CSRF vulnerability in Eric Allen APK Downloader apk-downloader allows Stored XSS.This issue affects APK Downloader: from n/a through = 1.0.0...

Malicious code in anton-downloader (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-803 Malicious code in anton-downloader (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-24684

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ederson Peka Media Downloader media-downloader allows Reflected XSS.This issue affects Media Downloader: from n/a through = 0.4.7.5...

CVE-2025-24684 WordPress Media Downloader Plugin <= 0.4.7.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ederson Peka Media Downloader media-downloader allows Reflected XSS.This issue affects Media Downloader: from n/a through = 0.4.7.5...

CVE-2025-24684

CVE-2025-24684 corresponds to a WordPress WordPress Media Downloader plugin vulnerability: Reflected Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. Affected software: Media Downloader versions up to 0.4.7.5 (and earlier). The connected sources confirm ...

CVE-2025-24684 WordPress Media Downloader Plugin <= 0.4.7.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ederson Peka Media Downloader media-downloader allows Reflected XSS.This issue affects Media Downloader: from n/a through = 0.4.7.5...

PT-2025-5504 · Unknown · Ederson Peka Media Downloader

Name of the Vulnerable Software and Affected Versions: Ederson Peka Media Downloader versions 0.4.7.5 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected Cross-site Scripting XSS. This enables an attacker to inje...

WordPress plugin Media Downloader 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-24684: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ederson Peka Media Downloader media-downloader allows Reflected XSS.This issue affects Media Downloader: from n/a through = 0.4.7.5...

WordPress Media Downloader Plugin <= 0.4.7.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Media Downloader versions = 0.4.7.5...

uniapi version 1.0.7 contained an information harvesting script.

uniapi version 1.0.7 introduces code that would executeon import of the module and download a script from a remote URL,and would then execute the downloaded script in a thread.The downloaded script would harvest system informationand POST the information to another remote URL.This code was found ...

CVE-2024-53588: Uncontrolled Search Path Element

A DLL hijacking vulnerability in iTop VPN v16.0 allows attackers to execute arbitrary code via placing a crafted DLL file into the path \ProgramData\iTop VPN\Downloader\vpn6...

Malicious code in prem-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc7dddf8406e12d71eea827bdcb666be7fbcff46abe825fbdfe7f315f250b680 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prem-fb-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fbb6df275aa4fd3a58792cb72b230546beeaa2fe12aae5f63ed5d516907fdf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prem-ig-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06c4a6771ffd4d3e9e4aa7f3e6c28ae1761be07ad176869dac7a5067d9d9378c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prem-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ede831b4b52c9df6bee9007afd5ecbf303a958640eb1ceb9fa7f2144992d3098 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prem-video-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98f8700f52463b240e5e69dc9d6c5f8da58fcfb2f7ade307ba971814a2f6bbb2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...