Malicious code in @zalastax/nolb-ngx-h (npm)

The package @zalastax/nolb-ngx-h was found to contain malicious code...

MAL-2025-13459 Malicious code in @zalastax/nolb-qmuzik-h (npm)

The package @zalastax/nolb-qmuzik-h was found to contain malicious code...

MAL-2025-11817 Malicious code in @zalastax/nolb-gulp-h (npm)

The package @zalastax/nolb-gulp-h was found to contain malicious code...

MAL-2025-12172 Malicious code in @zalastax/nolb-lion-lib-h (npm)

The package @zalastax/nolb-lion-lib-h was found to contain malicious code...

MAL-2025-12536 Malicious code in @zalastax/nolb-ngx-h (npm)

The package @zalastax/nolb-ngx-h was found to contain malicious code...

Malicious code in @zalastax/nolb-demo-h (npm)

The package @zalastax/nolb-demo-h was found to contain malicious code...

Malicious code in @zalastax/nolb-graphql-h (npm)

The package @zalastax/nolb-graphql-h was found to contain malicious code...

MAL-2025-12733 Malicious code in @zalastax/nolb-nodebb-plugin-h (npm)

The package @zalastax/nolb-nodebb-plugin-h was found to contain malicious code...

Malicious code in @zalastax/nolb-json-h (npm)

The package @zalastax/nolb-json-h was found to contain malicious code...

MAL-2025-13052 Malicious code in @zalastax/nolb-passport-h (npm)

The package @zalastax/nolb-passport-h was found to contain malicious code...

MAL-2025-13577 Malicious code in @zalastax/nolb-random-h (npm)

The package @zalastax/nolb-random-h was found to contain malicious code...

CVE-2025-8568

The GMap Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘h’ parameter in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

H3C M2 NAS 安全漏洞

H3C M2 NAS is a home private cloud disk from China's Xinhua San H3C. A security vulnerability exists in H3C M2 NAS version V100R006, which originates in the Webserver Configuration component that could lead to unwanted privilege execution...

2025-08 Dynamic Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5063709)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

CVE-2025-8568

The GMap Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘h’ parameter in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

CVE-2025-8568

The CVE-2025-8568 entry relates to the WordPress GMap Generator (Venturit) plugin, with a Stored Cross-Site Scripting vulnerability in the h parameter affecting all versions up to 1.1. The root cause is insufficient input sanitization and output escaping, allowing authenticated attackers with Con...

CVE-2025-8568 GMap - Venturit <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'h' Parameter

The GMap Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘h’ parameter in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

CVE-2025-8568 GMap - Venturit <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'h' Parameter

The GMap Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘h’ parameter in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

Microsoft Windows Storage Port Driver 信息泄露漏洞

The Microsoft Windows Storage Port Driver is a system-provided storage port driver from Microsoft USA that is particularly suited for high-performance buses, such as NVMe over Fibre Channel FC or FC buses and RAID adapters. An information disclosure vulnerability exists in the Microsoft Windows...

PT-2025-32618 · WordPress · Gmap Generator

Name of the Vulnerable Software and Affected Versions: GMap Generator plugin for WordPress versions up to and including 1.1 Description: The GMap Generator plugin for WordPress is susceptible to Stored Cross-Site Scripting through the h parameter. Insufficient input sanitization and output escapi...