WordPress plugin Social Reviews Recommendations 跨站脚本漏洞

...

WordPress plugin Auto Alt Text 跨站请求伪造漏洞

WordPress Auto Alt Text plugin is a tool that uses artificial intelligence technology to automatically generate alternative text AltText for website images. The WordPress Auto Alt Text plugin suffers from a cross-site request forgery vulnerability, which arises from a web application that does no...

WordPress plugin Contact Form 7 Dynamic Text Extension 安全漏洞

...

PT-2025-49866

Name of the Vulnerable Software and Affected Versions Social Reviews & Recommendations plugin for WordPress versions prior to 2.6 Description The Social Reviews & Recommendations plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to insufficient input sanitization and...

Sublime Text 安全漏洞

Sublime Text is a cross-platform, extensible text editor from Sublime, Inc. A security vulnerability exists in Sublime Text 3 Build 3208 version and prior versions, which originates from Dylib injection and could lead to code execution in the application environment...

CVE-2025-65741

Sublime Text 3 Build 3208 or prior for MacOS is vulnerable to Dylib Injection. An attacker could compile a .dylib file and force the execution of this library in the context of the Sublime Text application...

PT-2025-50068

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in sevenspark Contact Form 7 Dynamic Text Extension contact-form-7-dynamic-text-extension allows Code Injection.This issue affects Contact Form 7 Dynamic Text Extension: from n/a through = 5.0.3...

CVE-2025-65741

CVE-2025-65741 affects Sublime Text 3 on macOS Build 3208 and earlier via Dylib Injection, allowing a crafted .dylib to execute in Sublime Text’s process. Public sources consistently describe this vulnerability and recommend upgrading Sublime Text to Build 3209 or later to mitigate. No exploitati...

PT-2025-50215

Name of the Vulnerable Software and Affected Versions Sublime Text versions prior to Build 3209 Description Sublime Text 3 is susceptible to a Dylib Injection issue on MacOS. An attacker can compile a dynamic library .dylib file and execute it within the Sublime Text application’s process. This...

PT-2025-50012

Cross-Site Request Forgery CSRF vulnerability in Valerio Monti Auto Alt Text auto-alt-text allows Cross Site Request Forgery.This issue affects Auto Alt Text: from n/a through = 2.5.2...

CVE-2025-65741

Sublime Text 3 Build 3208 or prior for MacOS is vulnerable to Dylib Injection. An attacker could compile a .dylib file and force the execution of this library in the context of the Sublime Text application...

Substitution Cipher Based on The Voynich Manuscript

Here's a fun paper: "The Naibbe cipher: a substitution cipher that encrypts Latin and Italian as Voynich Manuscript-like ciphertext": Abstract: In this article, I investigate the hypothesis that the Voynich Manuscript MS 408, Yale University Beinecke Library is compatible with being a ciphertext ...

UBUNTU-CVE-2025-40304

In the Linux kernel, the following vulnerability has been resolved: fbdev: Add bounds checking in bitputcs to fix vmalloc-out-of-bounds Add bounds checking to prevent writes past framebuffer boundaries when rendering text near screen edges. Return early if the Y position is off-screen and clip...

CVE-2025-40304

CVE-2025-40304 corresponds to a Linux kernel vulnerability in the fbdev path, where an insufficient bounds check in the function used to render text (bit_putcs) allowed an out-of-bounds write to vmalloc-ed memory when drawing near framebuffer edges. The root cause was a mismatch between the alloc...

CVE-2025-40304 fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds

In the Linux kernel, the following vulnerability has been resolved: fbdev: Add bounds checking in bitputcs to fix vmalloc-out-of-bounds Add bounds checking to prevent writes past framebuffer boundaries when rendering text near screen edges. Return early if the Y position is off-screen and clip...

CVE-2025-40304

In the Linux kernel, the following vulnerability has been resolved: fbdev: Add bounds checking in bitputcs to fix vmalloc-out-of-bounds Add bounds checking to prevent writes past framebuffer boundaries when rendering text near screen edges. Return early if the Y position is off-screen and clip...

CVE-2025-14199

Verysync up to 2.21.3 is affected in the Web Administration Module via the file path /rest/f/api/resources/f96956469e7be39d/tmp/text.txt?override=false, where manipulation can lead to unrestricted file upload. The vulnerability can be exploited remotely and an exploit has been published. Affected...

Verysync 代码问题漏洞

Verysync is a private file synchronization and backup software from China-based Weili Synchronization Verysync. A code issue vulnerability exists in Verysync 2.21.3 and prior versions that originates from the file /rest/f/api/resources/f96956469e7be39d/tmp/text.txt?override=false in the component...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182: Exposed React Server Components RSC Detector...

WordPress Auto Alt Text plugin <= 2.5.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Auto Alt Text versions = 2.5.2...