CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

20313 matches found

OSV•added 2025/10/07 12:10 a.m.•3 views

MAL-2025-47935 Malicious code in winston-logger-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a5c4b995fe69e4aa74c03000fd07f0d610f634bc937efe85b509242671234eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score

SaveExploits0References1

Snyk•added 2025/10/07 12:10 a.m.•3 views

Malicious Package

Overview winston-logger-pro is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score

SaveExploits0References2

GithubExploit•added 2025/10/05 2:41 a.m.•335 views

Exploit for CVE-2025-6934

WP-CVE-2025-6934 | Opal Estate Pro = 1.7.5 - Unauthenticat...

9.8CVSS7.2AI score0.23359EPSS

SaveExploits12

RedhatCVE•added 2025/10/04 7:7 a.m.•11 views

CVE-2025-61599

Emlog is an open source website building system. A stored Cross-Site Scripting XSS vulnerability exists in the "Twitter"feature of EMLOG Pro 2.5.21 and below. An authenticated user with privileges to post a "Twitter" message can inject arbitrary JavaScript code. The malicious script is stored on...

5.1CVSS5.6AI score0.00189EPSS

SaveExploits1References1

RedhatCVE•added 2025/10/04 12:57 a.m.•6 views

CVE-2025-60448

A stored Cross-Site Scripting XSS vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists due to insufficient validation of SVG file uploads in the /admin/media.php component, allowing attackers to upload malicious SVG files containing JavaScript code that executes when th...

6.1CVSS6AI score0.00213EPSS

SaveExploits1References1

RedhatCVE•added 2025/10/04 12:56 a.m.•12 views

CVE-2025-60447

A stored Cross-Site Scripting XSS vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists in the email template configuration component located at /admin/setting.php?action=mail, which allows administrators to input HTML code that is not properly sanitized, leading to...

5.9CVSS5.8AI score0.0024EPSS

SaveExploits1References1