269 matches found
EUVD-2025-23413
Malicious code in bioql PyPI...
EUVD-2025-25976
Malicious code in bioql PyPI...
EUVD-2023-58580
Malicious code in bioql PyPI...
EUVD-2024-26416
Malicious code in bioql PyPI...
Malicious code in mountain-nest-range (npm)
The package mountain-nest-range was found to contain malicious code...
MAL-2025-45236 Malicious code in mountain-nest-range (npm)
The package mountain-nest-range was found to contain malicious code...
CVE-2025-54720
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SteelThemes Nest Addons nest-addons allows SQL Injection.This issue affects Nest Addons: from n/a through = 1.6.3...
CVE-2025-54720
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SteelThemes Nest Addons nest-addons allows SQL Injection.This issue affects Nest Addons: from n/a through = 1.6.3...
CVE-2025-54720 WordPress Nest Addons Plugin <= 1.6.3 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SteelThemes Nest Addons allows SQL Injection. This issue affects Nest Addons: from n/a through 1.6.3...
CVE-2025-54720
CVE-2025-54720 describes an SQL injection in the WordPress plugin Nest Addons by SteelThemes, affecting versions up to 1.6.3. Root cause: improper neutralization of input elements used in SQL commands. The vulnerability is listed as patched in version 1.6.3, with advisories indicating the fix req...
CVE-2025-54720 WordPress Nest Addons Plugin <= 1.6.3 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SteelThemes Nest Addons nest-addons allows SQL Injection.This issue affects Nest Addons: from n/a through = 1.6.3...
PT-2025-35071
Name of the Vulnerable Software and Affected Versions: SteelThemes Nest Addons versions through 1.6.3 Description: The software contains an Improper Neutralization of Special Elements used in an SQL Command vulnerability, which allows SQL Injection. Recommendations: Update SteelThemes Nest Addons...
WordPress plugin Nest Addons SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...
CVE-2025-54720: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SteelThemes Nest Addons nest-addons allows SQL Injection.This issue affects Nest Addons: from n/a through = 1.6.3...
Remote Code Execution (RCE)
@nestjs/devtools-integration is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper sandboxing and missing cross-origin protections due to unsafe execution of attacker-controlled input in a JavaScript sandbox via the /inspector/graph/interact endpoint...
UBUNTU-CVE-2025-38614
In the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi-unbounded recursion Ensure that epoll instances can never form a graph deeper than EPMAXNESTS+1 links. Currently, eploopcheckproc ensures that the graph is loop-free and does some recursion depth checks, but...
CVE-2025-54782: Improper Neutralization of Special Elements used in a Command
Nest is a framework for building scalable Node.js server-side applications. In versions 0.2.0 and below, a critical Remote Code Execution RCE vulnerability was discovered in the @nestjs/devtools-integration package. When enabled, the package exposes a local development HTTP server with an API...
PT-2025-31707
Name of the Vulnerable Software and Affected Versions: @nestjs/devtools-integration versions 0.2.0 and below Description: A critical Remote Code Execution RCE vulnerability exists in the @nestjs/devtools-integration package. When enabled, the package exposes a local development HTTP server with a...
kernel: nbd: null check for nla_nest_start
In the Linux kernel, the following vulnerability has been resolved: nbd: null check for nlaneststart The Linux kernel CVE team has assigned CVE-2024-27025 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050107-CVE-2024-27025-babd@gregkh/T...