MAL-2025-1622 Malicious code in ragbot-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61930f6fe18511dccf487d70fe3709eb3eda7cb06f67c342e8cd6c79553c033e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

com.kurzdigital:keycloak-admin-wrapper (>=0.9.11, <=0.10.3), com.pleosoft:pleosoft-spring-boot-starter (1.0.5-release) +105 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (4.8.3.final)

org.keycloak:keycloak-core MAVEN version 4.8.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.kurzdigital:keycloak-admin-wrapper =0.9.11, =1.1.0, =1.2.2, =1.2.2, =7.1.0.m5, =7.1.0.m5,...

CVE-2024-13834: Server-Side Request Forgery (SSRF)

The Responsive Plus – Starter Templates, Advanced Features and Customizer Settings for Responsive Theme plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.1.4 via the 'remoterequest' function. This makes it possible for authenticated attacker...

CVE-2024-45386: Insufficient Session Expiration

A vulnerability has been identified in SIMATIC PCS neo V4.0 All versions, SIMATIC PCS neo V4.1 All versions V4.1 Update 2, SIMATIC PCS neo V5.0 All versions V5.0 Update 1, SIMOCODE ES V19 All versions V19 Update 1, SIRIUS Safety ES V19 TIA Portal All versions V19 Update 1, SIRIUS Soft Starter ES...

PT-2025-6193

Name of the Vulnerable Software and Affected Versions: SIMATIC PCS neo versions V4.0 through V4.1 before Update 2 SIMATIC PCS neo versions V5.0 before Update 1 SIMOCODE ES versions V19 before Update 1 SIRIUS Safety ES versions V19 before Update 1 SIRIUS Soft Starter ES versions V19 before Update ...

CVE-2025-25106

Cross-Site Request Forgery CSRF vulnerability in FancyWP Starter Templates by FancyWP starter-templates allows Cross Site Request Forgery.This issue affects Starter Templates by FancyWP: from n/a through = 2.0.0...

org.jeecgframework.boot:jeecg-boot-starter-cloud (>=3.4.0, <=3.7.2), org.jeecgframework.boot:jeecg-boot-starter-lock (>=3.4.0, <=3.7.2) +3 more potentially affected by CVE-2024-57606 via org.jeecgframework.boot:jeecg-boot-common (>=3.4.0, <=3.7.2)

org.jeecgframework.boot:jeecg-boot-common MAVEN version =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.6.3, =3.7.2 Source cves: CVE-2024-57606 Source advisory: GHSA-WFPM-QCHC-6CF9...

org.jeecgframework.boot:jeecg-boot-starter-cloud (>=3.4.0, <=3.7.2), org.jeecgframework.boot:jeecg-boot-starter-lock (>=3.4.0, <=3.7.2) +3 more potentially affected by CVE-2024-57606 via org.jeecgframework.boot:jeecg-boot-common (>=3.4.0, <=3.7.2)

org.jeecgframework.boot:jeecg-boot-common MAVEN version =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.6.3, =3.7.2 Source cves: CVE-2024-57606 Source advisory: OSV:GHSA-WFPM-QCHC-6CF9...

CVE-2025-25106

Cross-Site Request Forgery CSRF vulnerability in FancyWP Starter Templates by FancyWP starter-templates allows Cross Site Request Forgery.This issue affects Starter Templates by FancyWP: from n/a through = 2.0.0...

CVE-2025-25106 WordPress Starter Templates by FancyWP plugin <= 2.0.0 - CSRF to Arbitrary Plugin Installation vulnerability

Cross-Site Request Forgery CSRF vulnerability in FancyWP Starter Templates by FancyWP allows Cross Site Request Forgery. This issue affects Starter Templates by FancyWP: from n/a through 2.0.0...

CVE-2025-25106

CVE-2025-25106 is a CSRF vulnerability in the WordPress plugin Starter Templates by FancyWP (affected: versions up to 2.0.0). The CVE entry indicates an attacker could exploit CSRF to perform arbitrary plugin installation . The Wordfence/WordPress vulnerability data show this entry is currently U...

CVE-2025-25106 WordPress Starter Templates by FancyWP plugin <= 2.0.0 - CSRF to Arbitrary Plugin Installation vulnerability

Cross-Site Request Forgery CSRF vulnerability in FancyWP Starter Templates by FancyWP starter-templates allows Cross Site Request Forgery.This issue affects Starter Templates by FancyWP: from n/a through = 2.0.0...

PT-2025-5935 · WordPress · Fancywp Starter Templates

Name of the Vulnerable Software and Affected Versions: FancyWP Starter Templates versions n/a through 2.0.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows unauthorized Cross Site Request Forgery. This vulnerability affects FancyWP Starter Templates, enabli...

org.jeecgframework.boot:jeecg-boot-starter-cloud (>=3.4.0, <=3.7.2), org.jeecgframework.boot:jeecg-boot-starter-lock (>=3.4.0, <=3.7.2) +3 more potentially affected by CVE-2024-57606 via org.jeecgframework.boot:jeecg-boot-common (>=3.4.0, <=3.7.2)

org.jeecgframework.boot:jeecg-boot-common MAVEN version =3.4.0, =3.4.0, =3.4.0, =3.4.0, =3.6.3, =3.7.2 Source cves: CVE-2024-57606 Source advisory: MEND:CVE-2024-57606...

WordPress plugin Starter Templates by FancyWP has a cross-site request forgeing vulnerability.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

CVE-2025-25106: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in FancyWP Starter Templates by FancyWP starter-templates allows Cross Site Request Forgery.This issue affects Starter Templates by FancyWP: from n/a through = 2.0.0...

CVE-2024-44003

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in spicethemes Spice Starter Sites spice-starter-sites allows Reflected XSS.This issue affects Spice Starter Sites: from n/a through = 1.2.5...

MAL-2025-871 Malicious code in starter-monorepo-microservices (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in starter-monorepo-microservices (npm)

--- -= Per source details. Do not edit below this line.=-...

WordPress Starter Templates by FancyWP plugin <= 2.0.0 - CSRF to Arbitrary Plugin Installation vulnerability

CSRF to Arbitrary Plugin Installation vulnerability discovered by Abdi Pranata in WordPress Plugin Starter Templates by FancyWP versions = 2.0.0...