264 matches found
PT-2026-5502
The Booking Calendar plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the wpbc ajax WPBC FLEXTIMELINE NAV function in all versions up to, and including, 10.14.13. This makes it possible for unauthenticated attackers to retrieve booking...
Malicious Package
Overview insightvm-ui-nav-menus is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...
EUVD-2026-3070
Malicious code in insightvm-ui-nav-menus npm...
MAL-2026-288 Malicious code in insightvm-ui-nav-menus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24e901eb03445094160df9df30313f817015ba26cdd09e82d4f527261acda35 The package insightvm-ui-nav-menus was found to contain malicious code. Source: ghsa-malware...
Malicious code in insightvm-ui-nav-menus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24e901eb03445094160df9df30313f817015ba26cdd09e82d4f527261acda35 The package insightvm-ui-nav-menus was found to contain malicious code. Source: ghsa-malware...
CVE-2023-49447
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/nav/update...
WordPress plugin Booking Calendar 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
Malicious Package
Overview rt-global-nav is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in rt-global-nav (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02bd8de33c5be198041c736003639439fad9b5df269d489cc4ab29b59191cab7 The package rt-global-nav was found to contain malicious code. Source: ghsa-malware e72ac5f9f497c4ba74c3c745f0cbfce94d7acf109ca98ff38f916fd8afa59e0f...
EUVD-2025-37142
Malicious code in epic-games-nav npm...
Malicious code in epic-games-nav (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2358b48b0499482e090fff386dcd3063342ed33d1a73ee900be5199e6bad00 The package epic-games-nav was found to contain malicious code...
MAL-2025-49151 Malicious code in epic-games-nav (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2358b48b0499482e090fff386dcd3063342ed33d1a73ee900be5199e6bad00 The package epic-games-nav was found to contain malicious code...
Trend Micro Recognized as a Leader in The Forrester Wave™ 2025 for NAV
Unified visibility, proactive intelligence, and proven leadership in network analysis and visibility...
EUVD-2025-33614
Malicious code in buyingflow-core-nav-web npm...
MAL-2025-48273 Malicious code in buyingflow-core-nav-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94b6cc0a729e266013937adc920cee3c7c57f6c4ef99bb5d08cc79e3e0ee9163 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview buyingflow-core-nav-web is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
Malicious code in buyingflow-core-nav-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94b6cc0a729e266013937adc920cee3c7c57f6c4ef99bb5d08cc79e3e0ee9163 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Fedora 41 : wordpress (2025-acd3e11344)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-acd3e11344 advisory. WordPress 6.8.3 Release Security updates included in this release: A data exposure issue where authenticated users could access some restricted content...