Fedora: Security Advisory (FEDORA-2025-ab370b9ac9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : toolbox (2025-ab370b9ac9)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ab370b9ac9 advisory. Security fixes Bumped the minimum github.com/go-viper/mapstructure/v2 version to 2.3.0 for GHSA-fv92-fjc5-jj9h or GO-2025-3787 Bumped the minimum...

CVE-2025-3703

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wipeoutmedia CSS & JavaScript Toolbox css-javascript-toolbox allows PHP Local File Inclusion.This issue affects CSS & JavaScript Toolbox: from n/a through 12.0.3...

Malicious code in tslint-config-toolbox (npm)

The package tslint-config-toolbox was found to contain malicious code...

Malicious code in toolbox-pharma (npm)

The package toolbox-pharma was found to contain malicious code...

Malicious code in stylelint-config-toolbox (npm)

The package stylelint-config-toolbox was found to contain malicious code...

Malicious code in aries-toolbox (npm)

The package aries-toolbox was found to contain malicious code...

MAL-2025-37046 Malicious code in toolbox-pharma (npm)

The package toolbox-pharma was found to contain malicious code...

MAL-2025-37261 Malicious code in tslint-config-toolbox (npm)

The package tslint-config-toolbox was found to contain malicious code...

MAL-2025-34125 Malicious code in stylelint-config-toolbox (npm)

The package stylelint-config-toolbox was found to contain malicious code...

MAL-2025-14825 Malicious code in aries-toolbox (npm)

The package aries-toolbox was found to contain malicious code...

CVE-2025-3703

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wipeoutmedia CSS & JavaScript Toolbox css-javascript-toolbox allows PHP Local File Inclusion.This issue affects CSS & JavaScript Toolbox: from n/a through 12.0.3...

CVE-2025-3703 WordPress CSS & JavaScript Toolbox plugin < 12.0.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wipeoutmedia CSS & JavaScript Toolbox css-javascript-toolbox allows PHP Local File Inclusion.This issue affects CSS & JavaScript Toolbox: from n/a through 12.0.3...

CVE-2025-3703 WordPress CSS & JavaScript Toolbox < 12.0.3 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wipeoutmedia CSS & JavaScript Toolbox allows PHP Local File Inclusion. This issue affects CSS & JavaScript Toolbox: from n/a through n/a...

CVE-2025-3703

The CVE-2025-3703 entry documents a Local File Inclusion (LFI) flaw in the WordPress plugin CSS & JavaScript Toolbox, caused by improper handling of include/require filename handling in PHP. Affects the plugin’s WordPress installation (CSS & JavaScript Toolbox) with versions prior to 12.0.3. CVSS...

WordPress plugin CSS & JavaScript Toolbox security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

PT-2025-33167 · Unknown · Css & Javascript Toolbox

Name of the Vulnerable Software and Affected Versions: CSS & JavaScript Toolbox affected versions not specified Description: The vulnerability involves improper control of filename handling for include/require statements in a PHP program, specifically a PHP remote file inclusion issue. This allow...

RHSA-2025:13674 Red Hat Security Advisory: toolbox security update

Bulletin has no description...

RHSA-2025:13673 Red Hat Security Advisory: toolbox security update

Bulletin has no description...

Important: Red Hat Security Advisory: toolbox security update

An update for toolbox is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...