WordPress plugin Robots.Txt rewrite 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

PT-2025-54368

Cross-Site Request Forgery CSRF vulnerability in Eugen Bobrowski Robots.Txt rewrite allows Cross Site Request Forgery.This issue affects Robots.Txt rewrite: from n/a through 1.6.1...

Mobile Industrial Robots Robots和Mobile Industrial Robots Fleet 安全漏洞

Mobile Industrial Robots Robots and Mobile Industrial Robots Fleet are both products of the Danish company Mobile Industrial Robots.Mobile Industrial Robots Robots is an autonomous mobile robot. Mobile Industrial Robots Robots is an autonomous mobile robot and Mobile Industrial Robots Fleet is a...

WordPress plugin Bard 安全漏洞

WordPress Bard plugin is a tool used to stop chatbots such as Bard from crawling the content of your website, which is achieved by modifying the virtual robots.txt file. The WordPress Bard plugin suffers from a cross-site request forgery vulnerability that originates when a web application does n...

EUVD-2020-2722

Malware in sbrugna...

EUVD-2020-2745

Malware in sbrugna...

EUVD-2018-2705

Malware in sbrugna...

EUVD-2020-2721

Malware in sbrugna...

EUVD-2018-2707

Malware in sbrugna...

EUVD-2025-27023

Malicious code in bioql PyPI...

EUVD-2025-23985

Malicious code in bioql PyPI...

EUVD-2025-27279

Malicious code in bioql PyPI...

EUVD-2025-28827

Malicious code in bioql PyPI...

CVE-2025-35027

Multiple robotic products by Unitree sharing a common firmware, including the Go2, G1, H1, and B2 devices, contain a command injection vulnerability. By setting a malicious string when configuring the on-board WiFi via a BLE module of an affected robot, then triggering a restart of the WiFi...

CVE-2025-35027 Unitree Multiple Robotic Products Command Injection

Multiple robotic products by Unitree sharing a common firmware, including the Go2, G1, H1, and B2 devices, contain a command injection vulnerability. By setting a malicious string when configuring the on-board WiFi via a BLE module of an affected robot, then triggering a restart of the WiFi...

CVE-2025-10772: Missing Authentication for Critical Function

A vulnerability was identified in huggingface LeRobot up to 0.3.3. Affected by this vulnerability is an unknown functionality of the file lerobot/common/robotdevices/robots/lekiwiremote.py of the component ZeroMQ Socket Handler. The manipulation leads to missing authentication. The attack can onl...

CVE-2025-52277

Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute arbitrary code via a crafted payload to the meta configuration robots field...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the robots field in the meta configuration. An attacker can execute arbitrary scripts in the context of the user's browser by submitting a specially crafted payload. Details Cross-site scripting or XSS is a...

GHSA-29CJ-CXW4-V4J2 YesWiki Cross Site Scripting vulnerability

Cross Site Scripting vulnerability in YesWiki v.4.5.4 allows a remote attacker to execute arbitrary code via a crafted payload to the meta configuration robots field...

YesWiki Cross Site Scripting vulnerability

Cross Site Scripting vulnerability in YesWiki v.4.5.4 allows a remote attacker to execute arbitrary code via a crafted payload to the meta configuration robots field...