49 matches found
CVE-2026-112222
Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through 1.8.0.744...
CVE-2026-112222 WordPress Surfer plugin <= 1.8.0.744 - Broken Access Control vulnerability
Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through 1.8.0.744...
CVE-2026-112222
The WordPress Surfer plugin (versions
EUVD-2026-104324
Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through 1.8.0.744...
WordPress Surfer plugin <= 1.8.0.744 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mor Golan in WordPress Plugin Surfer versions = 1.8.0.744...
CVE-2026-19325
A security vulnerability has been detected in IncomeStreamSurfer roo-code-memory-bank-mcp-server up to 9dcb2fb5e6b65a35ac1983885a6d4e5621a0081e. This affects the function readMemoryBankFile/appendMemoryBankEntry of the file src/index.ts of the component readmemorybankfile/appendmemorybankentry...
WS-2020-0437
In cloudron-surfer in versions 5.5.0 to 5.10.2 is vulnerable to enial of service via LDAP Injection...
LORIS Neuroimaging Platform Cross-site Scripting Vulnerability
LORIS Neuroimaging Platform is a neuroimaging platform open sourced by ACElab. Versions of LORIS Neuroimaging Platform from 15.10 to 27.0.3, as well as versions before 28.0.1, have a cross-site scripting vulnerability. This vulnerability stems from the surferaccounts module not setting the...
EUVD-2004-0737
Malware in sbrugna...
EUVD-2023-39074
Malicious code in bioql PyPI...
EUVD-2024-43364
Malicious code in bioql PyPI...
EUVD-2025-26563
Malicious code in bioql PyPI...
CVE-2025-58603
Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through = 1.6.4.574...
CVE-2025-58603
Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through = 1.6.4.574...
WordPress Surfer Plugin <= 1.6.4.574 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Hiro Code016Hiro in WordPress Plugin Surfer versions = 1.6.4.574...
CVE-2025-58603
CVE-2025-58603 : A missing-authorization issue affects the WordPress plugin Surfer (SurferSEO) up to version 1.6.4.574 . The vulnerability arises from incorrectly configured access control enabling unauthorized access to protected functionality. Reported as a WordPress plugin issue and tracked in...
CVE-2025-58603 WordPress Surfer Plugin <= 1.6.4.574 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through = 1.6.4.574...
CVE-2025-58603 WordPress Surfer Plugin <= 1.6.4.574 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through = 1.6.4.574...
PT-2025-35737
Name of the Vulnerable Software and Affected Versions: Surfer versions through 1.6.4.574 Description: A missing authorization issue exists in Surfer, allowing exploitation of incorrectly configured access control security levels. Recommendations: Update Surfer to a version later than 1.6.4.574...
WordPress plugin Surfer has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...