MAL-2025-25677 Malicious code in lunar-mountain-xlxk (npm)

The package lunar-mountain-xlxk was found to contain malicious code...

MAL-2025-22887 Malicious code in ice-fnzvy-v1nyz-lunar-project (npm)

The package ice-fnzvy-v1nyz-lunar-project was found to contain malicious code...

MAL-2025-14451 Malicious code in amethyst-4swde-b4vlx-lunar-project (npm)

The package amethyst-4swde-b4vlx-lunar-project was found to contain malicious code...

CVE-2014-4718

Multiple cross-site request forgery CSRF vulnerabilities in Lunar CMS before 3.3-3 allow remote attackers to hijack the authentication of administrators for requests that 1 add Super users via a request to admin/usercreate.php or conduct cross-site scripting XSS attacks via the 2 email or 3 subje...

CVE-2025-28936

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sakurapixel Lunar lunar-sell-photos-online allows Stored XSS.This issue affects Lunar: from n/a through = 1.3.0...

WordPress Lunar plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Plugin Lunar versions = 1.3.0...

CVE-2025-28936

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sakurapixel Lunar lunar-sell-photos-online allows Stored XSS.This issue affects Lunar: from n/a through = 1.3.0...

CVE-2025-28936 WordPress Lunar plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sakurapixel Lunar lunar-sell-photos-online allows Stored XSS.This issue affects Lunar: from n/a through = 1.3.0...

CVE-2025-28936

CVE-2025-28936 affects the WordPress plugin Lunar (Lunar – Sell photos online). The issue is a stored XSS caused by improper input neutralization during web page generation, affecting Lunar versions up to 1.3.0. The connected resources confirm the vulnerability title/description and affected vers...

CVE-2025-28936 WordPress Lunar plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sakurapixel Lunar lunar-sell-photos-online allows Stored XSS.This issue affects Lunar: from n/a through = 1.3.0...

WordPress plugin Lunar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

Malicious code in lunar-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe9a8b05cd878b17af9caf8b7741e3b99e737c24cce44b7e52942663d6f585ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

lunary SQL Injection Vulnerability

lunary is lunary open source a production toolkit for LLM . lunary suffers from a SQL injection vulnerability that stems from the use of sql.unsafe in the order by clause of a SQL query without prior cleanup. No detailed vulnerability details are provided at this time...

CVE-2024-49942

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Prevent null pointer access in xemigratecopy xemigratecopy designed to copy content of TTM resources. When source resource is null, it will trigger a NULL pointer dereference in xemigratecopy. To avoid this situation,...

CVE-2024-3507

Improper privilege management vulnerability in Lunar software that affects versions 6.0.2 through 6.6.0. This vulnerability allows an attacker to perform a secondary process injection into the Lunar application and abuse those rights to access sensitive user information...

CVE-2024-3507

CVE-2024-3507 affects Lunar software versions 6.0.2 through 6.6.0. The issue is an improper privilege management flaw that enables a secondary process injection into the Lunar application, allowing an attacker to abuse rights to access sensitive user information. Documented impact is high for con...

CVE-2024-3507 Privilege escalation vulnerability in Lunar

Improper privilege management vulnerability in Lunar software that affects versions 6.0.2 through 6.6.0. This vulnerability allows an attacker to perform a secondary process injection into the Lunar application and abuse those rights to access sensitive user information...

CVE-2024-3507 Privilege escalation vulnerability in Lunar

Improper privilege management vulnerability in Lunar software that affects versions 6.0.2 through 6.6.0. This vulnerability allows an attacker to perform a secondary process injection into the Lunar application and abuse those rights to access sensitive user information...

Lunar 安全漏洞

Lunar is a tool that uses the DDC protocol to change the hardware brightness of a monitor. A security vulnerability exists in Lunar versions 6.0.2 through 6.6.0 that originates from a vulnerability that allows an attacker to perform auxiliary process injection into the Lunar application and abuse...

Lunar 资源管理错误漏洞

Lunar is a tool that uses the DDC protocol to change the hardware brightness of a monitor. A resource management error vulnerability exists in Lunar versions 6.0.2 through 6.6.0 that originates from a vulnerability that allows an attacker to perform auxiliary process injection into the Lunar...