97 matches found
CVE-2025-12539
The TNC Toolbox: Web Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2. This is due to the plugin storing cPanel API credentials hostname, username, and API key in files within the web-accessible wp-content directory witho...
EUVD-2025-84363
The TNC Toolbox: Web Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2. This is due to the plugin storing cPanel API credentials hostname, username, and API key in files within the web-accessible wp-content directory witho...
CVE-2025-12539 TNC Toolbox: Web Performance <= 1.4.2 - Unauthenticated Sensitive Information Exposure to Privilege Escalation/cPanel Account Takeover
The TNC Toolbox: Web Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2. This is due to the plugin storing cPanel API credentials hostname, username, and API key in files within the web-accessible wp-content directory witho...
CVE-2025-12539
The CVE-2025-12539 entry concerns the WordPress plugin TNC Toolbox: Web Performance (versions up to 1.4.2). The vulnerability, described across multiple connected sources, is a Sensitive Information Exposure flaw caused by storing cPanel credentials (hostname, username, API key) in files under th...
WordPress TNC Toolbox: Web Performance plugin <= 1.4.2 - Unauthenticated Sensitive Information Exposure to Privilege Escalation/cPanel Account Takeover vulnerability
Unauthenticated Sensitive Information Exposure to Privilege Escalation/cPanel Account Takeover vulnerability discovered by kr0d in WordPress Plugin TNC Toolbox: Web Performance versions = 1.4.2...
WordPress plugin TNC Toolbox Web Performance 安全漏洞
WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A security vulnerability exists in the WordPress plugin TNC Toolbox Web Performance, which stem...
CVE-2025-12539: Insecure Storage of Sensitive Information
The TNC Toolbox: Web Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2. This is due to the plugin storing cPanel API credentials hostname, username, and API key in files within the web-accessible wp-content directory witho...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-415326)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-415326 advisory. In the Linux kernel, the following vulnerability has been resolved: ubifs: authentication: Fix use-after-free in ubifstncendcommit After an insertion in TNC, the tre...
EUVD-2022-44836
Malicious code in bioql PyPI...
EUVD-2024-54041
Malicious code in bioql PyPI...
EUVD-2023-59857
Malicious code in bioql PyPI...
EUVD-2025-15496
Malicious code in bioql PyPI...
EUVD-2024-22459
Malicious code in bioql PyPI...
EUVD-2024-42408
Malicious code in bioql PyPI...
CVE-2024-25097
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeNcode LLC TNC PDF viewer allows Stored XSS.This issue affects TNC PDF viewer: from n/a through 2.8.0...
CVE-2025-39509
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeNcode TNC FlipBook pdf-viewer-for-wordpress allows Stored XSS.This issue affects TNC FlipBook: from n/a through = 12.1.0...
CVE-2025-39509
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeNcode TNC FlipBook allows Stored XSS. This issue affects TNC FlipBook: from n/a through 12.1.0...
CVE-2025-39509
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeNcode TNC FlipBook pdf-viewer-for-wordpress allows Stored XSS.This issue affects TNC FlipBook: from n/a through = 12.1.0...
CVE-2025-39509
The CVE-2025-39509 entry concerns ThemeNcode TNC FlipBook for WordPress (TNC FlipBook) with stored XSS in the web page generation input handling. Affected versions are up to and including 12.1.0 (and earlier). The root cause is improper input neutralization during page generation, enabling stored...