CVE-2025-55674: Improper Neutralization of Special Elements used in an SQL Command

A bypass of the DISALLOWEDSQLFUNCTIONS security feature in Apache Superset allows for the execution of blocked SQL functions. An attacker can use a special inline block to circumvent the denylist. This allows a user with SQL Lab access to execute functions that were intended to be disabled, leadi...

PT-2025-33273

Name of the Vulnerable Software and Affected Versions: Apache Superset versions prior to 5.0.0 Description: A bypass of the DISALLOWED SQL FUNCTIONS security feature allows for the execution of blocked SQL functions. An attacker can use a special inline block to circumvent the denylist. This allo...

Zimbra Postjournal Command Execution

CVE-2024-45519 is a vulnerability in Zimbra Collaboration ZCS that allows unauthenticated users to execute commands through the postjournal service. This guide walks you through setting up a lab environment to reproduce the issue and execute the exploit...

xsser

XSSER ========== Presentation From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 Demo Version 2.0 - 2015: https://www.youtube.com/playlist?list=PLIjb28IYMQgqqqApoGRCZO40vP-eKsgf Version 2.5 - 2016: https://www.youtube.com/playlist?list=PLRic6PgcrsWGkgacL6WFnSQKVRZIoofRj Version 2.75 - 2017: Non...

Malicious code in @toptal/picasso-lab (npm)

The package communicates with a domain associated with malicious activity...

Exploit for CVE-2025-23167

CVE-2025-23167 – Node.js HTTP Request Smuggling Exploit Worki...

Exploit for Incorrect Authorization in Sudo_Project Sudo

CVE-2025-32462 & CVE-2025-32463 – PoC Lab This is a container...

OPENSUSE-SU-2025:15269-1 jupyter-bqplot-jupyterlab-0.5.44-10.1 on GA media

These are all security issues fixed in the jupyter-bqplot-jupyterlab-0.5.44-10.1 package on the GA media of openSUSE Tumbleweed...

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo

CVE-2025-32463 – Sudo chroot Local Privilege Escalation Lab T...

CVE-2025-4592

The AI Image Lab – Free AI Image Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the 'wpz-ai-images' page. This makes it possible for unauthenticated attackers to update...

CVE-2025-4592

The AI Image Lab – Free AI Image Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the 'wpz-ai-images' page. This makes it possible for unauthenticated attackers to update...

CVE-2025-4592

The CVE-2025-4592 entry concerns the WordPress plugin AI Image Lab – Free AI Image Generator. It describes a Cross-Site Request Forgery vulnerability (versions

CVE-2025-4592 AI Image Lab – Free AI Image Generator <= 1.0.6 - Cross-Site Request Forgery to API Key Update

The AI Image Lab – Free AI Image Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the 'wpz-ai-images' page. This makes it possible for unauthenticated attackers to update...

CVE-2025-4592 AI Image Lab – Free AI Image Generator <= 1.0.6 - Cross-Site Request Forgery to API Key Update

The AI Image Lab – Free AI Image Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the 'wpz-ai-images' page. This makes it possible for unauthenticated attackers to update...

WordPress AI Image Lab plugin <= 1.0.6 - Cross-Site Request Forgery to API Key Update vulnerability

Cross-Site Request Forgery to API Key Update vulnerability discovered by Kishan Vyas in WordPress Plugin AI Image Lab versions = 1.0.6...

CVE-2025-4592: Cross-Site Request Forgery (CSRF)

The AI Image Lab – Free AI Image Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the 'wpz-ai-images' page. This makes it possible for unauthenticated attackers to update...

WordPress Plugin AI Image Lab – Free AI Image Generator Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress AI Image Lab - Free AI Image Generator plugin, which stems from missing or incorrect validation of random...

PT-2025-25473 · WordPress · The Ai Image Lab – Free Ai Image Generator

Name of the Vulnerable Software and Affected Versions: The AI Image Lab – Free AI Image Generator plugin for WordPress versions 1.0.0 through 1.0.6 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the 'wpz-ai-images' page. This allows...

Malicious code in @jito-lab/provider (npm)

The package communicates with a domain associated with malicious activity...

CVE-2024-43706

creationtimestamp| type| source ---|---|--- 2025-06-10 18:33:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17965 2025-06-16 23:22:37+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3lrr4ptjf2k2w...