CVE-2025-11677

CVE-2025-11677 is a Use After Free in the warmcat libwebsockets WebSocket server (lws_handshake_server). The vulnerability triggers in configurations where a user-supplied callback handles LWS_CALLBACK_HTTP_CONFIRM_UPGRADE, potentially allowing a denial-of-service. Public advisories reference aff...

EUVD-2025-30700

Malicious code in bioql PyPI...

EUVD-2023-51913

Malicious code in bioql PyPI...

EUVD-2024-40611

Malicious code in bioql PyPI...

EUVD-2023-38149

Malicious code in bioql PyPI...

EUVD-2023-39780

Malicious code in bioql PyPI...

EUVD-2024-28461

Malicious code in bioql PyPI...

EUVD-2023-39773

Malicious code in bioql PyPI...

EUVD-2025-8598

Malicious code in bioql PyPI...

EUVD-2023-36551

Malicious code in bioql PyPI...

EUVD-2023-31229

Malicious code in bioql PyPI...

CVE-2025-57934

Cross-Site Request Forgery CSRF vulnerability in Aurélien LWS LWS Affiliation lws-affiliation allows Cross Site Request Forgery.This issue affects LWS Affiliation: from n/a through = 2.3.6...

CVE-2025-57934

Cross-Site Request Forgery CSRF vulnerability in Aurélien LWS LWS Affiliation lws-affiliation allows Cross Site Request Forgery.This issue affects LWS Affiliation: from n/a through = 2.3.6...

WordPress LWS Affiliation Plugin <= 2.3.6 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nabil Irawan in WordPress Plugin LWS Affiliation versions = 2.3.6...

CVE-2025-57934

CVE-2025-57934 is a Cross-Site Request Forgery (CSRF) vulnerability in the LWS Affiliation WordPress plugin. Affected product: LWS Affiliation (WordPress). Affected versions: from n/a through 2.3.6. Reported CVSS v3.1 base score: 4.3 (Medium) with attack vector: network, user interaction required...

CVE-2025-57934 WordPress LWS Affiliation Plugin <= 2.3.6 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Aurélien LWS LWS Affiliation lws-affiliation allows Cross Site Request Forgery.This issue affects LWS Affiliation: from n/a through = 2.3.6...

CVE-2025-57934 WordPress LWS Affiliation Plugin <= 2.3.6 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Aurélien LWS LWS Affiliation lws-affiliation allows Cross Site Request Forgery.This issue affects LWS Affiliation: from n/a through = 2.3.6...

WordPress plugin LWS Affiliation 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site reques...

PT-2025-38784

Name of the Vulnerable Software and Affected Versions Aurélien LWS LWS Affiliation versions through 2.3.6 Description A Cross-Site Request Forgery CSRF issue exists in Aurélien LWS LWS Affiliation. This allows for the execution of unwanted actions on behalf of an authenticated user. The issue...

CVE-2025-57934: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Aurélien LWS LWS Affiliation lws-affiliation allows Cross Site Request Forgery.This issue affects LWS Affiliation: from n/a through = 2.3.6...