1340 matches found
EUVD-2025-21222
Malicious code in bioql PyPI...
EUVD-2022-15519
Malicious code in bioql PyPI...
EUVD-2025-21239
Malicious code in bioql PyPI...
EUVD-2025-21218
Malicious code in bioql PyPI...
EUVD-2025-21240
Malicious code in bioql PyPI...
EUVD-2025-21361
Malicious code in bioql PyPI...
EUVD-2025-21203
Malicious code in bioql PyPI...
EUVD-2023-57911
Malicious code in bioql PyPI...
EUVD-2024-49724
Malicious code in bioql PyPI...
CVE-2025-59745 Multiple vulnerabilities in AndSoft's e-TMS
Vulnerability in the cryptographic algorithm of AndSoft's e-TMS v25.03, which uses MD5 to encrypt passwords. MD5 is a cryptographically vulnerable hash algorithm and is no longer considered secure for storing or transmitting passwords. It is vulnerable to collision attacks and can be easily crack...
CVE-2025-10000: Unrestricted Upload of File with Dangerous Type
The Qyrr – simply and modern QR-Code creation plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the blobtofile function in all versions up to, and including, 2.0.7. This makes it possible for authenticated attackers, with Contributor-level access...
CVE-2025-58669
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Modern Minds Magento 2 WordPress Integration m2wp allows Stored XSS.This issue affects Magento 2 WordPress Integration: from n/a through = 1.4.2.1...
CVE-2025-58669
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Modern Minds Magento 2 WordPress Integration m2wp allows Stored XSS.This issue affects Magento 2 WordPress Integration: from n/a through = 1.4.2.1...
PT-2025-38958
Name of the Vulnerable Software and Affected Versions Modern Minds Magento 2 WordPress Integration versions through 1.4.1 Description The Modern Minds Magento 2 WordPress Integration software contains a flaw related to improper input handling during web page generation, specifically a Stored...
CVE-2025-58669: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Modern Minds Magento 2 WordPress Integration m2wp allows Stored XSS.This issue affects Magento 2 WordPress Integration: from n/a through = 1.4.2.1...
Why XSS still matters: MSRC’s perspective on a 25-year-old threat
Cross-Site Scripting XSS has been a known vulnerability class for two decades, yet it continues to surface in modern applications, including those built with the latest frameworks and cloud-native architectures. At Microsoft, we still receive a steady stream of XSS reports across our services, fr...
Hashcat Advanced Password Recovery 7.1.2 Binary Release
Hashcat is an advanced GPU hash cracking utility that includes the World's fastest md5crypt, phpass, mscash2 and WPA / WPA2 cracker. It also has the first and only GPGPU-based rule engine, focuses on highly iterated modern hashes, single dictionary-based attacks, and more. This is the binary...
CTM360 Report Explains How Emotions Fuel Modern Fraud
CTM360 research reveals how scammers hook their victims through manipulative traps built on AI, stolen data, and brand…...
Modern vehicle cybersecurity trends
Modern vehicles are transforming into full-fledged digital devices that offer a multitude of features, from common smartphone-like conveniences to complex intelligent systems and services designed to keep everyone on the road safe. However, this digitalization, while aimed at improving comfort an...