4089 matches found
CVE-2025-12135 WPBookit <= 1.0.6 - Unauthenticated Stored Cross-Site Scripting
The WPBookit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'csscode' parameter in all versions up to, and including, 1.0.6 due to a missing capability check on the savecustomecode function. This makes it possible for unauthenticated attackers to inject arbitrary web...
Malicious code in peptest (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 1230d903d5782f1a6d2d779ada368260f2c32d9e4f74bfd3ddd8f4df9c570572 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
TencentOS Server 4: perl-Crypt-OpenSSL-RSA (TSSA-2025:0464)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0464 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
EUVD-2025-198180
esm.sh CDN service has JS Template Literal Injection in CSS-to-JavaScript...
MAL-2025-191870 Malicious code in sitoogether (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 09dd85c25ad8d35e40f8afc89c4a7f0322beb48a72db826b13c2142810460ac9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Path Traversal
Liferay Portal is vulnerable to path traversal. The vulnerability is due to improper validation of query strings in the ComboServlet, which allows an attacker to access arbitrary CSS/JS files and repeatedly load them to exploit the system...
CVE-2025-6599
An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50ABVY.6.3C0 and earlier could allow an attacker to perform Slowloris‑style denial‑of‑service DoS attacks. Such attacks may temporarily block legitimate HTTP requests and partially disrupt...
Malicious code in minemeld-core (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 dfe7b8c00b3748b3fe38ffdf3bd69558abb58091ee3347d47003929976ceb457 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
EUVD-2025-176169
Malicious code in style-loader-lint-commitlint-config-angular-bootstrap npm...
EUVD-2025-176168
Malicious code in style-loader-node-sass-graphql-nashira npm...
EUVD-2025-176129
Malicious code in supercluster-command-betelgeuse-style-loader npm...
EUVD-2025-176109
Malicious code in supernova-hyperion-tailwindcss-optimize-css-assets-webpack-plugin npm...
EUVD-2025-177431
Malicious code in optimize-css-assets-webpack-plugin-style-loader-bellatrix-prettier-stylelint npm...
EUVD-2025-177072
Malicious code in prettier-plugin-markdown-joviology-style-loader-zooarchaeology npm...
EUVD-2025-176814
Malicious code in radioastronomy-augmentedreality-library-style-loader npm...
EUVD-2025-176663
Malicious code in rest-neptune-style-loader-nconf npm...
EUVD-2025-178769
Malicious code in ganymede-style-loader-xanthus-javascript npm...
EUVD-2025-178474
Malicious code in hyperion-build-style-loader-lynx npm...