EUVD-2006-2333

Malware in sbrugna...

EUVD-2010-0212

Malware in sbrugna...

xdg-utils security update

An update is available for xdg-utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The xdg-utils package is a set of simple scripts that provide basic desktop...

RLSA-2025:7672 Moderate: xdg-utils security update

The xdg-utils package is a set of simple scripts that provide basic desktop integration functions for any Free Desktop. Security Fixes: xdg-utils: improper parse of mailto URIs allows bypass of Thunderbird security mechanism for attachments CVE-2022-4055 For more details about the security issues...

RockyLinux 9 : xdg-utils (RLSA-2025:7672)

The remote RockyLinux 9 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2025:7672 advisory. xdg-utils: improper parse of mailto URIs allows bypass of Thunderbird security mechanism for attachments CVE-2022-4055 Tenable has extracted the preceding...

EUVD-2022-51432

Malicious code in bioql PyPI...

EUVD-2023-31711

Malicious code in bioql PyPI...

EUVD-2023-41127

Malicious code in bioql PyPI...

EUVD-2023-57448

Malicious code in bioql PyPI...

EUVD-2025-30725

Malicious code in bioql PyPI...

EUVD-2023-31712

Malicious code in bioql PyPI...

A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling mailto: URIs, xdg-email allows attachments to be discreetly added via the URI when being passed to Thunderbird. An attacker could potentially send a victim a URI that automatically attaches a sensitive file to a new email. If a victim user does not notice that an attachment was added and sends the email, this could result in sensitive information disclosure. It has been confirmed that the code behind this issue is in xdg-email and not in Thunderbird.

...

CVE-2025-53464

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Online Optimisation WP Mailto Links wp-mailto-links allows Stored XSS.This issue affects WP Mailto Links: from n/a through = 3.1.4...

WordPress WP Mailto Links Plugin <= 3.1.4 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Bao BlueRock in WordPress Plugin WP Mailto Links versions = 3.1.4...

CVE-2025-53464

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Online Optimisation WP Mailto Links wp-mailto-links allows Stored XSS.This issue affects WP Mailto Links: from n/a through = 3.1.4...

CVE-2025-53464 WordPress WP Mailto Links Plugin <= 3.1.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Online Optimisation WP Mailto Links wp-mailto-links allows Stored XSS.This issue affects WP Mailto Links: from n/a through = 3.1.4...

CVE-2025-53464

CVE-2025-53464 affects the WordPress plugin WP Mailto Links, with a Stored XSS vulnerability in the plugin’s handling of input during web page generation. Affected versions are listed as WP Mailto Links

CVE-2025-53464 WordPress WP Mailto Links Plugin <= 3.1.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ironikus WP Mailto Links allows Stored XSS. This issue affects WP Mailto Links: from n/a through 3.1.4...

PT-2025-39000

Name of the Vulnerable Software and Affected Versions Ironikus WP Mailto Links versions through 3.1.4 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, leading to a potential Cross-site Scripting XSS issue. This specific instance...

CVE-2025-53464: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Online Optimisation WP Mailto Links wp-mailto-links allows Stored XSS.This issue affects WP Mailto Links: from n/a through = 3.1.4...