9 matches found
Malicious code in diva-banubo-imba (npm)
Source: amazon-inspector 739a5157fdd84b9f1b7b0b76ab116ecbdfa38e26636f159eba9c200f7f5c63f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
EUVD-2025-210252
Unauthenticated Local File Inclusion in Imba = 1.5.0 versions...
CVE-2025-69106
Unauthenticated Local File Inclusion in Imba = 1.5.0 versions...
CVE-2025-69106 WordPress Imba theme <= 1.5.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Imba = 1.5.0 versions...
CVE-2025-69106 WordPress Imba theme <= 1.5.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Imba = 1.5.0 versions...
CVE-2025-69106
Technical details (affected version, root cause, impact, remediation) are not provided in the connected documents. The Initial Description confirms a Local File Inclusion in Imba theme
CVE-2025-69106: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Imba = 1.5.0 versions...
WordPress Imba theme <= 1.5.0 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Imba versions = 1.5.0...