WordPress plugin Semrush Content Toolkit 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

ai.catboost:catboost-spark_4.1_2.13 (=1.2.10), ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0) +4410 more potentially affected by CVE-2025-67735 via io.netty:netty-codec-http (>=4.2.0.Alpha1 <=4.2.7.Final)

io.netty:netty-codec-http MAVEN version =4.2.0.Alpha1, =0.1.0, =0.1.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =26.3.2 and more Source cves: CVE-2025-67735 Source advisory: SNYK:JAVA-IONETTY-14423947...

WordPress Semrush Content Toolkit plugin <= 1.1.32 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Semrush Content Toolkit versions = 1.1.32...

CVE-2025-14022

LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an integrated financial SDK. The SDK interfered with the application's network processing, causing server certificate verification to be disabled for a significant portion of netwo...

EUVD-2025-203262

A vulnerability was detected in OFFIS DCMTK up to 3.6.9. Affected by this issue is the function DcmByteString::makeDicomByteString of the file dcmdata/libsrc/dcbytstr.cc of the component dcmdata. The manipulation results in memory corruption. The attack can be launched remotely. Upgrading to...

CVE-2025-14607

A vulnerability was detected in OFFIS DCMTK up to 3.6.9. Affected by this issue is the function DcmByteString::makeDicomByteString of the file dcmdata/libsrc/dcbytstr.cc of the component dcmdata. The manipulation results in memory corruption. The attack can be launched remotely. Upgrading to...

DEBIAN-CVE-2025-14607

A vulnerability was detected in OFFIS DCMTK up to 3.6.9. Affected by this issue is the function DcmByteString::makeDicomByteString of the file dcmdata/libsrc/dcbytstr.cc of the component dcmdata. The manipulation results in memory corruption. The attack can be launched remotely. Upgrading to...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds via the makeDicomByteString function in the dcmdata component when processing specially crafted DICOM data. An attacker can cause memory corruption, potentially leading to information disclosure, data integrity compromise,...

CVE-2025-14607

A vulnerability was detected in OFFIS DCMTK up to 3.6.9. Affected by this issue is the function DcmByteString::makeDicomByteString of the file dcmdata/libsrc/dcbytstr.cc of the component dcmdata. The manipulation results in memory corruption. The attack can be launched remotely. Upgrading to...

PT-2025-51116

Name of the Vulnerable Software and Affected Versions OFFIS DCMTK versions prior to 3.7.0 Description A flaw exists in the DcmByteString::makeDicomByteString function within the dcmdata/libsrc/dcbytstr.cc file of the dcmdata component. This manipulation can lead to memory corruption and can be...

Malicious code in elf-stats-sugarplum-toolkit-176 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b262e6aa5320c23fa0220f81850b84e2bda91e747192ba16f4d9c5b3f17cc9 The package elf-stats-sugarplum-toolkit-176 was found to contain malicious code...

EUVD-2025-202777

Malicious code in elf-stats-sparkly-toolkit-821 npm...

Malicious code in elf-stats-sparkly-toolkit-821 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997629d6ea65a954ad3c1bd4cb4f52757510da21531cf34acd2d6ee67971ec6c The package elf-stats-sparkly-toolkit-821 was found to contain malicious code...

EUVD-2025-202774

Malicious code in elf-stats-sugarplum-toolkit-176 npm...

MAL-2025-192535 Malicious code in elf-stats-sugarplum-toolkit-176 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b262e6aa5320c23fa0220f81850b84e2bda91e747192ba16f4d9c5b3f17cc9 The package elf-stats-sugarplum-toolkit-176 was found to contain malicious code...

MAL-2025-192532 Malicious code in elf-stats-sparkly-toolkit-821 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997629d6ea65a954ad3c1bd4cb4f52757510da21531cf34acd2d6ee67971ec6c The package elf-stats-sparkly-toolkit-821 was found to contain malicious code...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Exploitation Tool A comprehensive security res...

EUVD-2025-202913

Malicious code in elf-stats-snowy-toolkit-186 npm...

Malicious code in elf-stats-snowy-toolkit-186 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e42a7ca12612653aaf7b01c778d65725cf59436f0da1a2e2c1ef371bd5296a23 The package elf-stats-snowy-toolkit-186 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192447 Malicious code in elf-stats-snowy-toolkit-186 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e42a7ca12612653aaf7b01c778d65725cf59436f0da1a2e2c1ef371bd5296a23 The package elf-stats-snowy-toolkit-186 was found to contain malicious code. Source: ghsa-malware...