ilcaffediroma.it Cross Site Scripting vulnerability OBB-4047420

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-39416

Cross-Site Request Forgery CSRF vulnerability in Ichi translit it! translit-it allows Stored XSS.This issue affects translit it!: from n/a through = 1.6...

CVE-2025-39416

CVE-2025-39416 : WordPress plugin translit it! (

CVE-2025-39416 WordPress translit it! plugin <= 1.6 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ichi translit it! allows Stored XSS. This issue affects translit it!: from n/a through 1.6...

Malicious code in bespoke-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50c8574065c05dfb54a421ce73341ceff847e8acdccdc1a8e800d12e6aee9f05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3232 Malicious code in bespoke-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50c8574065c05dfb54a421ce73341ceff847e8acdccdc1a8e800d12e6aee9f05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress plugin translit it! 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2025-17080 · Arete It · Arete-It Activity Reactions For Buddypress

Name of the Vulnerable Software and Affected Versions: arete-it Activity Reactions For Buddypress versions 1.0.0 through 1.0.22 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enable...

PT-2025-16983 · Unknown · Ichi Translit It!

Name of the Vulnerable Software and Affected Versions: Ichi translit it! versions n/a through 1.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions n/a through 1.6, update to a version that includes a fix for this issue...

Product Walkthrough: A Look Inside Wing Security's Layered SaaS Identity Defense

Intro: Why hack in when you can log in? SaaS applications are the backbone of modern organizations, powering productivity and operational efficiency. But every new app introduces critical security risks through app integrations and multiple users, creating easy access points for threat actors. As...

CWA smartcard logon error 'Can’t read smart card' on client with SIM card

There is a client with 2 smart cards . A physical smart card and an integrated eSIM . When CWA Windows tries to autenticate with smartcard the user gets an error that says "Can't read smart card. Please contact your IT administrator" . If we remove the SIM card from the client , the authenticatio...

Security Bulletin: IBM Watson CP4D Data Stores is vulnerable to Envoy denial of service vulnerabilitiy( CVE-2024-45810).

Summary Potential Envoy denial of service vulnerabilitiy CVE-2024-45810 has been identified that affects IBM Watson CP4D Data Stores. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2024-45810 DESCRIPTION: Envoy is vulnerable to ...

[SECURITY] Fedora 40 Update: zabbix-6.0.39-1.fc40

Zabbix is software that monitors numerous parameters of a network and the health and integrity of servers. Zabbix uses a flexible notification mechanism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. Zabbix offers...

[SECURITY] Fedora 42 Update: zabbix-7.2.5-1.fc42

Zabbix is software that monitors numerous parameters of a network and the health and integrity of servers. Zabbix uses a flexible notification mechanism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. Zabbix offers...

[SECURITY] Fedora 41 Update: zabbix-7.0.11-1.fc41

Zabbix is software that monitors numerous parameters of a network and the health and integrity of servers. Zabbix uses a flexible notification mechanism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. Zabbix offers...

Siemens SENTRON 7KT PAC1260 Data Manager

SUMMARY SENTRON 7KT PAC1260 Data Manager is affected by multiple vulnerabilities as listed below. Software fixes can no longer be provided for The SENTRON 7KT PAC1260 Data Manager. This advisory documents the known open vulnerabilities. To fix the vulnerabilities, Siemens recommends to replace...

CVE-2025-31571

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cynob IT Consultancy The Logo Slider the-logo-slider allows Reflected XSS.This issue affects The Logo Slider: from n/a through = 1.0.0...

CVE-2025-31808

Cross-Site Request Forgery CSRF vulnerability in itpathsolutions SCSS WP Editor scss-wp-editor allows Cross Site Request Forgery.This issue affects SCSS WP Editor: from n/a through = 1.2.1...

com.vip.saturn:saturn-console (>=3.0.0-m1, <=3.5.1), com.vip.saturn:saturn-it (>=3.0.0-m5, <=3.5.1) potentially affected by CVE-2025-29085 via com.vip.saturn:saturn-console-api (>=3.0.0-m1, <=3.5.1)

com.vip.saturn:saturn-console-api MAVEN version =3.0.0-m1, =3.0.0-m1, =3.0.0-m5, =3.5.1 Source cves: CVE-2025-29085 Source advisory: SNYK:JAVA-COMVIPSATURN-9749461...

CVE-2025-31571

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cynob IT Consultancy The Logo Slider the-logo-slider allows Reflected XSS.This issue affects The Logo Slider: from n/a through = 1.0.0...