624 matches found
EUVD-2025-17268
Malicious code in bioql PyPI...
EUVD-2024-16250
Malicious code in bioql PyPI...
EUVD-2024-36498
Malicious code in bioql PyPI...
EUVD-2025-17269
Malicious code in bioql PyPI...
CVE-2025-8417
CVE-2025-8417 affects the WordPress plugin Catalog Importer, Scraper & Crawler (versions
CVE-2025-8417 Catalog Importer, Scraper & Crawler <= 5.1.4 - Unauthenticated PHP Code Injection
The Catalog Importer, Scraper & Crawler plugin for WordPress is vulnerable to PHP code injection in all versions up to, and including, 5.1.4. This is due to reliance on a guessable numeric token e.g. ?key= 900001705 without proper authentication, combined with the unsafe use of eval on...
WordPress Catalog Importer, Scraper & Crawler plugin <= 5.1.4 - Unauthenticated PHP Code Injection vulnerability
Unauthenticated PHP Code Injection vulnerability discovered by CVEhunter in WordPress Plugin Catalog Importer, Scraper & Crawler versions = 5.1.4...
WordPress Plugin Catalog Importer Scraper Crawler Code Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code injection vulnerability exists in...
CVE-2025-8417: Improper Control of Generation of Code
The Catalog Importer, Scraper & Crawler plugin for WordPress is vulnerable to PHP code injection in all versions up to, and including, 5.1.4. This is due to reliance on a guessable numeric token e.g. ?key= 900001705 without proper authentication, combined with the unsafe use of eval on...
A Risk Manager for Intrusion Tolerant Systems: Enhancing HAL 9000 with New Scoring and Data Sources
Intrusion Tolerant Systems ITSs have become increasingly critical due to the rise of multi-domain adversaries exploiting diverse attack surfaces. ITS architectures aim to tolerate intrusions, ensuring system compromise is prevented or mitigated even with adversary presence. Existing ITS solutions...
MAL-2025-18440 Malicious code in dibs-aws-trade-article-scraper (npm)
The package dibs-aws-trade-article-scraper was found to contain malicious code...
Malicious code in Boilerpipe-Scraper (npm)
The package Boilerpipe-Scraper was found to contain malicious code...
Malicious code in super-scraper-client (npm)
The package super-scraper-client was found to contain malicious code...
MAL-2025-15933 Malicious code in Boilerpipe-Scraper (npm)
The package Boilerpipe-Scraper was found to contain malicious code...
MAL-2025-34197 Malicious code in super-scraper-client (npm)
The package super-scraper-client was found to contain malicious code...
MAL-2025-8121 Malicious code in @kiicodeproject/scraper (npm)
The package @kiicodeproject/scraper was found to contain malicious code...
Malicious code in @kiicodeproject/scraper (npm)
The package @kiicodeproject/scraper was found to contain malicious code...
gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2025-55197 via pypdf (4.3.0)
pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2025-55197 Source advisory: OSV:GHSA-7HFW-26VP-JP8M...