263 matches found
Malicious code in nutritious_bobcat_ivory-19 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fdf02c34fc1f8636ec7bcd51b21ed0cacd105b294eb92ec6c0c546bc0aeaa55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-12636
The Ubia camera ecosystem fails to adequately secure API credentials, potentially enabling an attacker to connect to backend services. The attacker would then be able to gain unauthorized access to available cameras, enabling the viewing of live feeds or modification of settings...
CVE-2025-27919
An issue was discovered in AnyDesk through 9.0.4. A remotely connected user with the "Control my device" permission can manipulate remote AnyDesk settings and create a password for the Full Access profile without needing confirmation from the counterparty. Consequently, the attacker can later...
CVE-2025-12410
The SH Contextual Help plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.1. This is due to missing or incorrect nonce validation in the shcontextualhelpdashboardwidget function. This makes it possible for unauthenticated attackers to update...
CVE-2025-11887
The Supervisor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX functions in all versions up to, and including, 1.3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update...
CVE-2025-10375
The Web Accessibility By accessiBe plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.10. This is due to missing nonce validation on multiple AJAX actions including accessibesignup, accessibelogin, accessibelicensetrial, accessibemodifyconfig,...
CVE-2025-10375 Web Accessibility By accessiBe <= 2.10 - Cross-Site Request Forgery
The Web Accessibility By accessiBe plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.10. This is due to missing nonce validation on multiple AJAX actions including accessibesignup, accessibelogin, accessibelicensetrial, accessibemodifyconfig,...
PT-2025-41666
Name of the Vulnerable Software and Affected Versions Web Accessibility By accessiBe plugin for WordPress versions through 2.10 Description The Web Accessibility By accessiBe plugin for WordPress is susceptible to Cross-Site Request Forgery. This is caused by a lack of nonce validation on several...
EUVD-2011-5217
Malware in sbrugna...
EUVD-2014-2410
Malware in sbrugna...
EUVD-2012-1253
Malware in sbrugna...
EUVD-2016-2293
Malware in sbrugna...
EUVD-2013-6001
Malware in sbrugna...
EUVD-2025-17098
Malicious code in bioql PyPI...
EUVD-2024-16234
Malicious code in bioql PyPI...
EUVD-2025-26250
Malicious code in bioql PyPI...
EUVD-2025-21763
Malicious code in bioql PyPI...
EUVD-2025-27653
Malicious code in bioql PyPI...