EUVD-2025-44225

Malicious code in zain-klanting28-sukiwir npm...

EUVD-2025-46404

Malicious code in maya-klipo65-sukiwir npm...

EUVD-2025-47170

Malicious code in impressiveimpalaz3n npm...

EUVD-2025-44259

Malicious code in yuni-liwet34-sukiwir npm...

EUVD-2025-43985

Malicious code in gita-tahu30-ruro npm...

EUVD-2025-43289

Malicious code in nana-ubi4-miaww npm...

EUVD-2025-43931

Malicious code in hadianto-kolak1-sukiwir npm...

EUVD-2025-40081

Malicious code in citra-brongkos96-breki npm...

EUVD-2025-41175

Malicious code in eko-dradag77-breki npm...

EUVD-2025-40080

Malicious code in citra-bubur16-ruro npm...

EUVD-2025-38678

Malicious code in xaver-tempe51-breki npm...

EUVD-2025-38199

EUVD-2025-38199...

EUVD-2025-38196

EUVD-2025-38196...

EUVD-2025-38209

EUVD-2025-38209...

EUVD-2025-38163

Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxStandaloneVpnClientsController.ajaxAction that allows an authenticated low-privileged observer user to inject SQL via datatable search parameters, leading to disclosure of database information...

EUVD-2025-38161

IBM OpenPages 9.1, and 9.0 with Watson is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...

EUVD-2025-38172

Advantech WebAccess/VPN versions prior to 1.1.5 contain a stored cross-site scripting XSS vulnerability via StandaloneVpnClientsController.addStandaloneVpnClientAction. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the...

EUVD-2025-38168

Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxNetworkController.ajaxAction that allows an authenticated low-privileged observer user to inject SQL via datatable search parameters, leading to disclosure of database information...

EUVD-2025-37778

The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.6.4.1. This is due to the plugin not properly verifying that a user is authorized to perform administrativ...

EUVD-2025-37791

The Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability checks in the "depicter-media-upload" AJAX route in all...