10288 matches found
CVE-2025-11986 Crypto Tool <= 2.22 - Unauthenticated Information Exposure via Global Authentication State
The Crypto plugin for WordPress is vulnerable to Information exposure in all versions up to, and including, 2.22. This is due to the plugin registering an unauthenticated AJAX action wpajaxnoprivcryptoconnectajaxprocess that allows calling the register and savenft methods with only a...
CVE-2025-11986
CVE-2025-11986 affects the WordPress Crypto Tool plugin (
CVE-2025-12924
A vulnerability was identified in rymcu forest up to de53ce79db9faa2efc4e79ce1077a302c42a1224. This issue affects the function GlobalResult of the file src/main/java/com/rymcu/forest/web/api/bank/BankController.java. The manipulation leads to missing authorization. The attack may be initiated...
EUVD-2025-54106
Malicious code in global-cyan-hedgehog npm...
EUVD-2025-54103
Malicious code in global-violet-spoonbill npm...
MAL-2025-68546 Malicious code in global-violet-spoonbill (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c02a8a57e4e3dc1ca4348957c9f7b5a23b0144e10a83155b7ff7d0f43be27746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-54104
Malicious code in global-indigo-pig npm...
EUVD-2025-54105
Malicious code in global-harlequin-iguana npm...
Malicious code in global-indigo-pig (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84bd80928a69ea83e9f509aa2a56e785d5305d967cd5cd21241a08bb723c2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-54107
Malicious code in global-blush-boa npm...
Malicious code in global-harlequin-iguana (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fe6a7743feeb13dfdc8001ce18599bd9fe27237be4b904d0ddaaaae130dbef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in global_dingo_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf2e5f0df41e54148e10935397d2a9d387af444d0c769d3465b7dc50b909e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
WordPress Crypto Tool plugin <= 2.22 - Unauthenticated Information Exposure via Global Authentication State vulnerability
Unauthenticated Information Exposure via Global Authentication State vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Crypto versions = 2.22...
EUVD-2025-47420
Malicious code in globalmeadowlarkz3n npm...
EUVD-2025-44048
In JetBrains YouTrack before 2025.3.104432 misconfiguration in the Junie could lead to exposure of the global Junie token...
CVE-2025-64689
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it relates to internal functionality that is not available to customers...
CVE-2025-64689
...
CVE-2025-64689
CVE-2025-64689 is rejected/not used; this CVE ID does not represent an active vulnerability entry.
Prototype Pollution
messageformat is vulnerable to Prototype Pollution. The vulnerability is due to improper handling of nested message keys containing special characters such as proto, which allows an attacker to inject arbitrary properties into the global object prototype, potentially leading to denial of service ...