The vulnerability of the AI application scaling framework and Python Ray, related to the manipulation of inter-site requests, allows a perpetrator to execute arbitrary code.

The vulnerability of the AI application scaling framework and Python Ray is related to the manipulation of cross-site requests during the processing of the User-Agent header. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through browsers like Firefox and Safari...

CVE-2025-12115

The WPC Name Your Price for WooCommerce plugin for WordPress is vulnerable to unauthorized price alteration in all versions up to, and including, 2.1.9. This is due to the plugin not disabling the ability to name a custom price when it has been specifically disabled for a product. This makes it...

EUVD-2020-23793

Malware in sbrugna...

EUVD-2021-2555

Malware in sbrugna...

EUVD-2017-12206

Malware in sbrugna...

EUVD-2017-5219

Malware in sbrugna...

EUVD-2019-0609

Malware in sbrugna...

EUVD-2016-7023

Malware in sbrugna...

EUVD-2021-30598

Malicious code in bioql PyPI...

EUVD-2025-14769

Malicious code in bioql PyPI...

EUVD-2021-30592

Malicious code in bioql PyPI...

EUVD-2023-51424

Malicious code in bioql PyPI...

Moderate: mysql:8.4 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. Security Fixes: openssl: Timing side-channel in ECDSA signature computation CVE-2024-13176 mysql: mysqldump unspecified vulnerability CPU Apr 2025...

PT-2025-31584 · Php-Jwt · Php-Jwt

Name of the Vulnerable Software and Affected Versions: php-jwt version 6.11.0 Description: php-jwt version 6.11.0 contains a cryptographic weakness. This weakness enables potential token manipulation. Recommendations: At the moment, there is no information about a newer version that contains a fi...

CVE-2025-8198 MinimogWP – The High Converting eCommerce WordPress Theme <= 3.9.0 - Unauthenticated Price Manipulation

The MinimogWP – The High Converting eCommerce WordPress Theme theme for WordPress is vulnerable to price manipulation in all versions up to, and including, 3.9.0. This is due to an insufficient check on quantity values when changing quantities in the cart. This makes it possible for unauthenticat...

PT-2025-30960 · WordPress +1 · Minimogwp +1

Name of the Vulnerable Software and Affected Versions: MinimogWP – The High Converting eCommerce WordPress Theme versions prior to 3.9.1 Description: The MinimogWP – The High Converting eCommerce WordPress Theme for WordPress is susceptible to price manipulation due to an insufficient check on...

CVE-2025-3771

A path or symbolic link manipulation vulnerability in SIR 1.0.3 and prior versions allows an authenticated non-admin local user to overwrite system files with SIR backup files, which can potentially cause a system crash. This was achieved by adding a malicious entry to the registry under the...

CVE-2025-3771

A path or symbolic link manipulation vulnerability in SIR 1.0.3 and prior versions allows an authenticated non-admin local user to overwrite system files with SIR backup files, which can potentially cause a system crash. This was achieved by adding a malicious entry to the registry under the...

CVE-2020-2866

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments / File Upload. Supported versions that are affected are 12.2.5-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2020-28002

In SonarQube 8.4.2.36762, an external attacker can achieve authentication bypass through SonarScanner. With an empty value for the -D sonar.login option, anonymous authentication is forced. This allows creating and overwriting public and private projects via the /api/ce/submit endpoint...