6984 matches found
CVE-2025-9094 ThingsBoard Add Gateway special elements used in a template engine
A vulnerability was detected in ThingsBoard 4.1. This vulnerability affects unknown code of the component Add Gateway Handler. The manipulation leads to improper neutralization of special elements used in a template engine. The attack can be initiated remotely. The exploit has been disclosed to t...
CVE-2025-49059
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CleverReach® CleverReach® WP cleverreach-wp allows SQL Injection.This issue affects CleverReach® WP: from n/a through = 1.5.20...
CVE-2025-39510
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Pinterest Automatic Pin wp-pinterest-automatic allows SQL Injection.This issue affects Pinterest Automatic Pin: from n/a through 4.19.0...
WordPress UiCore Elements plugin arbitrary file read vulnerability
WordPress UiCore Elements plugin is a plugin designed for the Elementor page builder to extend its functionality and enhance website design capabilities. An arbitrary file read vulnerability exists in the WordPress UiCore Elements plugin, which stems from the application's inadequate protection o...
Malicious code in additor-elements (npm)
The package additor-elements was found to contain malicious code...
Malicious code in additor-elements-client (npm)
The package additor-elements-client was found to contain malicious code...
Malicious code in react-native-elemens (npm)
The package react-native-elemens was found to contain malicious code...
Malicious code in skyflow-elements-update (npm)
The package skyflow-elements-update was found to contain malicious code...
Malicious code in ysb-ui-elements (npm)
The package ysb-ui-elements was found to contain malicious code...
nice-elements (>=1.1.2, <=1.13.7), olaii-web-common (>=1.0.0, <=1.0.33) potentially affected by unknown CVE via angular-truncate (0.0.1-security)
angular-truncate NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on angular-truncate and may be impacted: - nice-elements =1.1.2, =1.0.0, =1.0.33 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14532...
Malicious code in bh-elements (npm)
The package bh-elements was found to contain malicious code...
MAL-2025-33389 Malicious code in skyflow-elements-update (npm)
The package skyflow-elements-update was found to contain malicious code...
MAL-2025-14074 Malicious code in additor-elements-client (npm)
The package additor-elements-client was found to contain malicious code...
MAL-2025-14073 Malicious code in additor-elements (npm)
The package additor-elements was found to contain malicious code...
Malicious code in additor-elements-evo (npm)
The package additor-elements-evo was found to contain malicious code...
MAL-2025-15653 Malicious code in bh-elements (npm)
The package bh-elements was found to contain malicious code...
MAL-2025-14075 Malicious code in additor-elements-evo (npm)
The package additor-elements-evo was found to contain malicious code...
MAL-2025-40631 Malicious code in ysb-ui-elements (npm)
The package ysb-ui-elements was found to contain malicious code...
