10868 matches found
CVE-2025-54684
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CRM Perks Integration for Contact Form 7 and Constant Contact cf7-constant-contact allows Stored XSS.This issue affects Integration for Contact Form 7 and Constant Contact: from n/a through = 1.1.7...
CVE-2025-6221
CVE-2025-6221 affects the WordPress plugin Embed Bokun (≤0.23). Affected component: the align parameter; vulnerability type: Stored Cross‑Site Scripting . Conditions: authenticated attackers with at least Contributor rights can inject scripts that execute when any user visits the affected page. R...
CVE-2025-9060
A vulnerability has been found in the MSoft MFlash application that allows execution of arbitrary code on the server. The issue occurs in the integration configuration functionality that is only available to MFlash administrators. The vulnerability is related to insufficient validation of...
CVE-2025-9060 MFlash Remote Code Execution (RCE) after authentication of a user with the "administrator" role
A vulnerability has been found in the MSoft MFlash application that allows execution of arbitrary code on the server. The issue occurs in the integration configuration functionality that is only available to MFlash administrators. The vulnerability is related to insufficient validation of...
CVE-2025-9060 MFlash Remote Code Execution (RCE) after authentication of a user with the "administrator" role
A vulnerability has been found in the MSoft MFlash application that allows execution of arbitrary code on the server. The issue occurs in the integration configuration functionality that is only available to MFlash administrators. The vulnerability is related to insufficient validation of...
CVE-2025-9060
CVE-2025-9060 pertains to MSoft MFlash, where insufficient validation of parameters in the integration configuration functionality (accessible to administrators) can lead to arbitrary code execution on the server. Affects MFlash v8.0 (and possibly other versions). Reported remediation is to apply...
CVE-2025-5048 DGN File Parsing Memory Corruption Vulnerability
A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...
Malicious code in sycamore-integration-algolia (npm)
The package sycamore-integration-algolia was found to contain malicious code...
Malicious code in sycamore-integration-evolution (npm)
The package sycamore-integration-evolution was found to contain malicious code...
Malicious code in sycamore-integration-carweb (npm)
The package sycamore-integration-carweb was found to contain malicious code...
Malicious code in sycamore-integration-mandrill (npm)
The package sycamore-integration-mandrill was found to contain malicious code...
MAL-2025-14184 Malicious code in airbnb-angular (npm)
The package airbnb-angular was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 7fff1f5000c3707b881be6257856ad35d4e8c37a27f0219b0e380ee46fcae5ea This package installs a dependency hosted on a custom domain that runs an...
MAL-2025-12662 Malicious code in @zalastax/nolb-node-red-contrib-- (npm)
The package @zalastax/nolb-node-red-contrib-- was found to contain malicious code...
MAL-2025-34312 Malicious code in sycamore-integration-freeagent (npm)
The package sycamore-integration-freeagent was found to contain malicious code...
MAL-2025-19703 Malicious code in epic-launcher-integration (npm)
The package epic-launcher-integration was found to contain malicious code...
MAL-2025-34307 Malicious code in sycamore-integration-algolia (npm)
The package sycamore-integration-algolia was found to contain malicious code...
MAL-2025-34311 Malicious code in sycamore-integration-evolution (npm)
The package sycamore-integration-evolution was found to contain malicious code...
MAL-2025-23265 Malicious code in integration-hub-worker-base (npm)
The package integration-hub-worker-base was found to contain malicious code...