686 matches found
EUVD-2025-18740
Malicious code in bioql PyPI...
EUVD-2023-43870
Malicious code in bioql PyPI...
EUVD-2025-17752
Malicious code in bioql PyPI...
EUVD-2023-44008
Malicious code in bioql PyPI...
EUVD-2024-48137
Malicious code in bioql PyPI...
EUVD-2025-19047
Malicious code in bioql PyPI...
CVE-2025-57903
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPSuperiors Developer WooCommerce Additional Fees On Checkout Free woo-additional-fees-on-checkout-wordpress allows Stored XSS.This issue affects WooCommerce Additional Fees On Checkout Free: from...
WordPress WooCommerce Additional Fees On Checkout (Free) plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Plugin WooCommerce Additional Fees On Checkout Free versions = 1.5.2...
CVE-2025-57903
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPSuperiors Developer WooCommerce Additional Fees On Checkout Free woo-additional-fees-on-checkout-wordpress allows Stored XSS.This issue affects WooCommerce Additional Fees On Checkout Free: from...
CVE-2025-57903
CVE-2025-57903: Stored XSS in WooCommerce Additional Fees On Checkout (Free) for WordPress. Affected: WooCommerce Additional Fees On Checkout (Free) plugin, vulnerable component: input handling during checkout page generation. Impact per document: cross-site scripting resulting in stored XSS. Aff...
CVE-2025-57903 WordPress WooCommerce Additional Fees On Checkout (Free) plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPSuperiors Developer WooCommerce Additional Fees On Checkout Free woo-additional-fees-on-checkout-wordpress allows Stored XSS.This issue affects WooCommerce Additional Fees On Checkout Free: from...
CVE-2025-57903 WordPress WooCommerce Additional Fees On Checkout (Free) Plugin <= 1.5.0 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPSuperiors Developer WooCommerce Additional Fees On Checkout Free allows Stored XSS. This issue affects WooCommerce Additional Fees On Checkout Free: from n/a through 1.5.0...
PT-2025-39013
Name of the Vulnerable Software and Affected Versions WPSuperiors Developer WooCommerce Additional Fees On Checkout Free versions through 1.5.0 Description The software contains a flaw related to improper input handling during web page generation, which can lead to Cross-site Scripting XSS. This...
Watch out for the “We are hiring” remote online evaluator message scam
Looking at our team’s recent text messages, you’d think that remote online evaluators are in high demand right now. Several members of our team have received the almost exact same job offer scam texts. The content of the messages is almost identical, but there is a variation in background images...
CVE-2025-54427
Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate. The extrinsic notemingaspricetarget is an inherent extrinsic, meaning only the block producer can call it. To ensure correctness, the ProvideInherent trait should be implemented for each inherent, which...
CVE-2025-54427
Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate. The extrinsic notemingaspricetarget is an inherent extrinsic, meaning only the block producer can call it. To ensure correctness, the ProvideInherent trait should be implemented for each inherent, which...
CVE-2025-54427 Polkadot Frontier contains missing `check_inherent` for `note_min_gas_price_target` inflates gas price
Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate. The extrinsic notemingaspricetarget is an inherent extrinsic, meaning only the block producer can call it. To ensure correctness, the ProvideInherent trait should be implemented for each inherent, which...
GO-2025-3791 Babylon vulnerable to chain half when transaction has fees different than `ubbn` in github.com/babylonlabs-io/babylon
Babylon vulnerable to chain half when transaction has fees different than ubbn in github.com/babylonlabs-io/babylon...
Denial Of Service (DoS)
github.com/babylonlabs-io/babylon is vulnerable to Denial Of Service DoS. The vulnerability is due to the acceptance of transaction fees in denominations other than the native Babylon genesis denom ubbn, which allows an attacker to halt the blockchain by submitting such transactions...
Babylon vulnerable to chain half when transaction has fees different than `ubbn`
Summary Sending transactions with fees different than native Babylon genesis denom ubbn leads to chain halt. Impact Denial of Service - Due to panic in the x/distribution module BeginBlocker triggered by a error when sending fees from feeCollector to x/distribution module -...