CVE-2025-23864: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Luke America WCS QR Code Generator wcs-qr-code-generator allows Stored XSS.This issue affects WCS QR Code Generator: from n/a through = 1.0...

CVE-2025-23831: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mobstac QR Code Generator qrcode-wprhe allows DOM-Based XSS.This issue affects QR Code Generator: from n/a through = 1.2.6...

PT-2025-5128

Name of the Vulnerable Software and Affected Versions Rene Hermenau QR Code Generator versions 1.2.6 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potentially inject...

PT-2025-5150

Name of the Vulnerable Software and Affected Versions WCS QR Code Generator versions n/a through 1.0 Description The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can inject malicious...

PT-2025-5230 · Awcode +1 · Awcode +2

Name of the Vulnerable Software and Affected Versions: Salvador – AI Image Generator versions 1.0.11 and earlier Description: The issue is related to a missing authorization vulnerability in AWcode and KingfisherFox Salvador – AI Image Generator, which allows the exploitation of incorrectly...

WordPress Plugin QR Code Generator Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

BIT-PHP-MIN-2023-3247 Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP

In PHP versions 8.0. before 8.0.29, 8.1. before 8.1.20, 8.2. before 8.2.7 when using SOAP HTTP Digest Authentication, random value generator was not checked for failure, and was using narrower range of values than it should have. In case of random generator failure, it could lead to a disclosure ...

atelier-generator (>=25.3.1, <=25.3.4), citrailmu (>=25.3.1, <=25.3.8) +2 more potentially affected by CVE-2025-23042 via gradio (4.38.1)

gradio PYPI version 4.38.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - atelier-generator =25.3.1, =25.3.1, =25.3.4, =25.3.1, =25.3.5 Source cves: CVE-2025-23042 Source advisory: OSV:PYSEC-2025-118...

atelier-generator (>=25.3.1, <=25.3.4), citrailmu (>=25.3.1, <=25.3.8) +2 more potentially affected by CVE-2025-23042 via gradio (4.38.1)

gradio PYPI version 4.38.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - atelier-generator =25.3.1, =25.3.1, =25.3.4, =25.3.1, =25.3.5 Source cves: CVE-2025-23042 Source advisory: OSV:GHSA-J2JG-FQ62-7C3H...

CVE-2024-12606: Missing Authorization

The AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT GPT-4o 128K plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enginerequestdata function in all versions up...

CVE-2024-12473: Improper Neutralization of Special Elements used in an SQL Command

The AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT GPT-4o 128K plugin for WordPress is vulnerable to SQL Injection via the 'templateid' parameter of the 'articlebuildergeneratedata' shortcode in all versions up to, and...

CVE-2024-40762

Use of Cryptographically Weak Pseudo-Random Number Generator PRNG in the SonicOS SSLVPN authentication token generator that, in certain cases, can be predicted by an attacker potentially resulting in authentication bypass...

CVE-2024-40762

Use of Cryptographically Weak Pseudo-Random Number Generator PRNG in the SonicOS SSLVPN authentication token generator that, in certain cases, can be predicted by an attacker potentially resulting in authentication bypass...

CVE-2024-12605: Cross-Site Request Forgery (CSRF)

The AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT GPT-4o 128K plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5. This is due to missing or incorrect nonce validatio...

SonicWALL NSv Cryptographically Weak PRNG Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of SonicWALL NSv. Authentication is not required to exploit this vulnerability. The specific flaw exists within the generation of cookies. The issue results from the use of a cryptographically weak...

SonicWALL SonicOS security vulnerabilities

SonicWALL SonicOS is an operating system designed for SonicWall firewall appliances from SonicWALL Inc. in the United States. A security vulnerability exists in SonicWALL SonicOS that stems from the use of a cryptographically weak pseudo-random number generator PRNG in the authentication token...

CVE-2025-0218

When batch jobs are executed by pgAgent, a script is created in a temporary directory and then executed. In versions of pgAgent prior to 4.2.3, an insufficiently seeded random number generator is used when generating the directory name, leading to the possibility for a local attacker to pre-creat...

DEBIAN-CVE-2025-0218

When batch jobs are executed by pgAgent, a script is created in a temporary directory and then executed. In versions of pgAgent prior to 4.2.3, an insufficiently seeded random number generator is used when generating the directory name, leading to the possibility for a local attacker to pre-creat...

UBUNTU-CVE-2025-0218

When batch jobs are executed by pgAgent, a script is created in a temporary directory and then executed. In versions of pgAgent prior to 4.2.3, an insufficiently seeded random number generator is used when generating the directory name, leading to the possibility for a local attacker to pre-creat...

CVE-2025-0218 pgAgent scheduled batch job scripts are created in a predictable temporary directory potentially allowing a denial of service

When batch jobs are executed by pgAgent, a script is created in a temporary directory and then executed. In versions of pgAgent prior to 4.2.3, an insufficiently seeded random number generator is used when generating the directory name, leading to the possibility for a local attacker to pre-creat...