5857 matches found
Linux Distros Unpatched Vulnerability : CVE-2018-6152
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The implementation of the Page.downloadBehavior backend unconditionally marked downloaded files as safe, regardless of file type in Google Chrome prior to...
CVE-2025-8464
The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.9.0 via the wpcf7guestuserid cookie. This makes it possible for unauthenticated attackers to upload and delete files outside of the...
CVE-2025-8464 Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.0 - Directory Traversal via `wpcf7_guest_user_id` Cookie
The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.9.0 via the wpcf7guestuserid cookie. This makes it possible for unauthenticated attackers to upload and delete files outside of the...
CVE-2025-8464 Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.0 - Directory Traversal via `wpcf7_guest_user_id` Cookie
The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.9.0 via the wpcf7guestuserid cookie. This makes it possible for unauthenticated attackers to upload and delete files outside of the...
CVE-2025-8464
CVE-2025-8464 affects the WordPress plugin Drag and Drop Multiple File Upload for Contact Form 7, vulnerable to Directory Traversal through the wpcf7_guest_user_id cookie in all versions up to 1.3.9.0. This could allow unauthenticated attackers to upload and delete files outside the intended dire...
PT-2025-33542 · WordPress · Drag/Drop Multiple File Upload – Contact Form 7
Name of the Vulnerable Software and Affected Versions: Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress versions through 1.3.9.0 Description: The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal via the wpcf7...
Malicious code in ursa-jsonp-lyra-dotenv-safe (npm)
The package ursa-jsonp-lyra-dotenv-safe was found to contain malicious code...
Malicious code in nightwatch-andromeda-dotenv-safe-figures (npm)
The package nightwatch-andromeda-dotenv-safe-figures was found to contain malicious code...
Malicious code in dotenv-safe-auriga-cz-conventional-changelog-castor (npm)
The package dotenv-safe-auriga-cz-conventional-changelog-castor was found to contain malicious code...
Malicious code in dotenv-safe-firebase-uninstall-innercore (npm)
The package dotenv-safe-firebase-uninstall-innercore was found to contain malicious code...
Malicious code in rate-limiter-joviology-apex-dotenv-safe (npm)
The package rate-limiter-joviology-apex-dotenv-safe was found to contain malicious code...
MAL-2025-13955 Malicious code in ablation-dotenv-safe-coronalmassejection-non-blocking (npm)
The package ablation-dotenv-safe-coronalmassejection-non-blocking was found to contain malicious code...
MAL-2025-18667 Malicious code in dotenv-safe-firebase-uninstall-innercore (npm)
The package dotenv-safe-firebase-uninstall-innercore was found to contain malicious code...
MAL-2025-25768 Malicious code in magellan-xo-dotenv-safe-typeorm (npm)
The package magellan-xo-dotenv-safe-typeorm was found to contain malicious code...
MAL-2025-23327 Malicious code in iota-biohacking-dotenv-safe-delphinus (npm)
The package iota-biohacking-dotenv-safe-delphinus was found to contain malicious code...
Malicious code in decoherence-astroinformatics-subduction-dotenv-safe (npm)
The package decoherence-astroinformatics-subduction-dotenv-safe was found to contain malicious code...
Malicious code in phoebe-dotenv-safe-markdown-init (npm)
The package phoebe-dotenv-safe-markdown-init was found to contain malicious code...
Malicious code in bootstrap-jabbah-blackhole-dotenv-safe (npm)
The package bootstrap-jabbah-blackhole-dotenv-safe was found to contain malicious code...