13120 matches found
WordPress Pre-Publish Post Checklist plugin <= 3.1 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Nguyen Ngoc Quang Bach maysbachs in WordPress Plugin Pre-Publish Post Checklist versions = 3.1...
WordPress OnionBuzz plugin <= 1.0.7 - Cross Site Request Forgery (CSRF) Vulnerability
Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin OnionBuzz versions = 1.0.7...
WordPress JetEngine plugin <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by stealthcopter in WordPress Plugin JetEngine versions = 3.7.0...
CVE-2025-53273
Cross-Site Request Forgery CSRF vulnerability in Slickstream Slickstream slick-engagement allows Cross Site Request Forgery.This issue affects Slickstream: from n/a through = 2.0.3...
CVE-2025-53193
Cross-Site Request Forgery CSRF vulnerability in Burst Statistics B.V. Burst Statistics burst-statistics allows Cross Site Request Forgery.This issue affects Burst Statistics: from n/a through = 2.0.6...
CGA-W6G4-5W3R-HVGW
Bulletin has no description...
Security Bulletin: IBM Maximo Application Suite - Manage Component uses braces-3.0.2.tgz which is vulnerable to CVE-2024-4068
Summary Security Bulletin: IBM Maximo Application Suite - Manage Component uses braces-3.0.2.tgz which is vulnerable to CVE-2024-4068. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-4068 DESCRIPTION: The NPM package braces,...
PT-2025-27160 · WordPress · Wp Edit
Name of the Vulnerable Software and Affected Versions: WP Edit versions 4.0.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicious...
PT-2025-27277 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: Marvell QConvergeConsole affected versions not specified Description: The issue is related to the deserialization of untrusted data in the readNICParametersFromFile function, which can lead to remote code execution. Recommendations: At the...
CVE-2025-6734
creationtimestamp| type| source ---|---|--- 2025-06-26 23:53:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19660 2025-06-30 20:27:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114774193882630947 2026-01-08 20:16:37+00:00| published-proof-of-concept|...
MAL-2025-6596 Malicious code in sqiul83 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 67d309c2d4c740426c07cc17768f6313eebd765242e7e4a63aa04213d21358ea During installation of the source package, it attempts to silently download and start a remote executable. At the time of analysis, the downloading link did no...
MAL-2025-5419 Malicious code in intercom-intercom-embed (npm)
The package communicates with a domain associated with malicious activity...
K000152186: Python Jinja2 vulnerability CVE-2025-27516
Security Advisory Description Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts with the |attr filter allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an...
MAL-2025-5281 Malicious code in json-webhooks (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 776d1361c31fc0cb7ceb907404e53747cde097dab00614dafac0820111281ad9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5363 Malicious code in astro-island (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
CGA-V27H-RH4V-G3H6
Bulletin has no description...
CVE-2025-6674 CKEditor5 Youtube - Moderately critical - Cross-site Scripting - SA-CONTRIB-2025-081
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal CKEditor5 Youtube allows Cross-Site Scripting XSS.This issue affects CKEditor5 Youtube: from 0.0.0 before 1.0.3...
WordPress WP-Recall plugin <= 16.26.14 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin WP-Recall versions = 16.26.14...
WordPress Team Showcase plugin < 25.05.13 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao KhanhVCI - VNPT in WordPress Plugin Team Showcase versions 25.05.13...