6698 matches found
Malicious code in harmony-app-toolkit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c12fe64417829f19a3ad302001c909c0825b09e1c4a25c957eb8aa96997f49 The package declares a preinstall lifecycle script preinstall.js that reads a hex-encoded command from preinstall.json, decodes it with...
WordPress affiliate-toolkit plugin <= 3.8.8 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter vulnerability
Authenticated Administrator+ SQL Injection via 'orderby' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin affiliate-toolkit versions = 3.8.8...
GO-2024-3239 vulnerabilities
Vulnerabilities for packages: nvidia-gpu-operator-validator, nvidia-container-toolkit...
GO-2024-3237 vulnerabilities
Vulnerabilities for packages: nvidia-gpu-operator-validator, nvidia-container-toolkit...
GO-2025-3992 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2025-3828 vulnerabilities
Vulnerabilities for packages: agentbeat, nvidia-nsight-compute-13.0, nvidia-nsight-compute-13.2, nemo, nvidia-nsight-compute-12.8, newrelic-fluent-bit-output, kubeflow-katib, nvidia-nsight-compute-13.1, nvidia-nsight-compute-12.9...
GO-2025-3992 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2024-3237 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2024-3239 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2025-4097 vulnerabilities
Vulnerabilities for packages: podman, falco-no-driver, sriov-network-device-plugin, grafana-alloy, node-feature-discovery, buildah, kubernetes, nvidia-container-toolkit, k3s...
GO-2025-4096 vulnerabilities
Vulnerabilities for packages: podman, falco-no-driver, sriov-network-device-plugin, grafana-alloy, node-feature-discovery, buildah, kubernetes, nvidia-container-toolkit, k3s...
GO-2026-5761 vulnerabilities
Vulnerabilities for packages: podman, cadvisor, sriov-network-device-plugin, node-feature-discovery, buildah, k8s-device-plugin, nvidia-container-toolkit...
CVE-2026-12743
The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...
CVE-2026-12743 affiliate-toolkit <= 3.8.8 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...
CVE-2026-12743
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2026-12743
The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...
EUVD-2026-58590
The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...
CVE-2026-12743 affiliate-toolkit <= 3.8.8 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...