EUVD-2023-50218

Malicious code in bioql PyPI...

EUVD-2023-52809

Malicious code in bioql PyPI...

EUVD-2024-29903

Malicious code in bioql PyPI...

CVE-2025-9991

The Tiny Bootstrap Elements Light plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.3.34 via the 'language' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the...

CVE-2025-9991 Tiny Bootstrap Elements Light <= 4.3.34 - Unauthenticated Local File Inclusion

The Tiny Bootstrap Elements Light plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.3.34 via the 'language' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the...

WordPress Tiny Bootstrap Elements Light plugin <= 4.3.34 - Unauthenticated Local File Inclusion vulnerability

Unauthenticated Local File Inclusion vulnerability discovered by Aril Aprilio forsak3n in WordPress Plugin Tiny Bootstrap Elements Light versions = 4.3.34...

CVE-2025-9991: Improper Control of Filename for Include/Require Statement in PHP Program

The Tiny Bootstrap Elements Light plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.3.34 via the 'language' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the...

CVE-2025-9898: Cross-Site Request Forgery (CSRF)

The cForms – Light speed fast Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.0. This is due to missing or incorrect nonce validation on the cformsapi function. This makes it possible for unauthenticated attackers to modify...

Malicious code in dotenv-light (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae938c214e61a6e70c595df567e32105d5c5eebb0cd147deae6c5f7fe91c75c5 Any computer that has this package installed or running should be considered...

MAL-2025-47584 Malicious code in dotenv-light (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae938c214e61a6e70c595df567e32105d5c5eebb0cd147deae6c5f7fe91c75c5 Any computer that has this package installed or running should be considered...

WordPress NIX Anti-Spam Light Plugin <= 0.0.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin NIX Anti-Spam Light versions = 0.0.4...

CVE-2025-58270

CVE-2025-58270 is a Cross-Site Request Forgery (CSRF) vulnerability in NIX Anti-Spam Light . The WordPress plugin is affected for versions listed as “from n/a through 0.0.4.” The CVSS details from the connected data show a base score of 7.1 (High) , with network attack vector, low attack complexi...

CVE-2025-58270 WordPress NIX Anti-Spam Light Plugin <= 0.0.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in NIX Solutions Ltd NIX Anti-Spam Light nix-anti-spam-light allows Cross Site Request Forgery.This issue affects NIX Anti-Spam Light: from n/a through = 0.0.4...

CVE-2025-58270 WordPress NIX Anti-Spam Light Plugin <= 0.0.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in NIX Solutions Ltd NIX Anti-Spam Light nix-anti-spam-light allows Cross Site Request Forgery.This issue affects NIX Anti-Spam Light: from n/a through = 0.0.4...

The vulnerability of the SSH protocol implementation in software for controlling traffic lights with Q-Free MaxTime allows a intruder to increase their privileges and execute arbitrary code.

The vulnerability of the SSH protocol implementation in software for controlling traffic lights with Q-Free MaxTime lies in the use of strictly encrypted login credentials. Exploiting this vulnerability allows a malicious actor to increase their privileges and execute arbitrary code remotely...

The vulnerability of the Q-Free MaxTime traffic light control software lies in the improper limitation of the path name in the directory structure, allowing a violator to gain unauthorized access to protected information.

The vulnerability of the Q-Free MaxTime traffic light management software is related to an incorrect restriction on the path name for the maxtime/api/database/database. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information through a...

CVE-2025-58270: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in NIX Solutions Ltd NIX Anti-Spam Light nix-anti-spam-light allows Cross Site Request Forgery.This issue affects NIX Anti-Spam Light: from n/a through = 0.0.4...

PT-2025-38932

Name of the Vulnerable Software and Affected Versions NIX Anti-Spam Light versions through 0.0.4 Description The software contains a Cross-Site Request Forgery CSRF flaw. This allows attackers to perform actions on behalf of an authenticated user without their knowledge. Recommendations Update to...

WordPress plugin NIX Anti-Spam Light 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

CVE-2025-58805

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OTWthemes Widgetize Pages Light widgetize-pages-light allows Stored XSS.This issue affects Widgetize Pages Light: from n/a through = 3.0...