WordPress plugin Media Player Addons for Elementor 跨站脚本漏洞

WordPress Media Player Addons for Elementor plugin is a plugin designed for Elementor page builder, mainly used to extend the media playback functionality. A cross-site scripting vulnerability exists in the WordPress Media Player Addons for Elementor plugin, which stems from insufficient input...

PT-2025-38121

Name of the Vulnerable Software and Affected Versions: Media Player Addons for Elementor plugin for WordPress version 1.0.5 Description: The Media Player Addons for Elementor plugin for WordPress is susceptible to Stored Cross-Site Scripting due to insufficient input sanitization and output...

PT-2025-36988

Name of the Vulnerable Software and Affected Versions: Zoom Workplace VDI Plugin versions prior to 6.4.10 Zoom Workplace VDI Plugin versions prior to 6.2.15 Zoom Workplace VDI Plugin versions prior to 6.3.12 Description: A race condition exists in the Zoom Workplace VDI Plugin macOS Universal...

CVE-2025-9809

Out-of-bounds write in cdfsopencuetrack in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .cue file with a file path exceeding PATHMAXLENGTH that is copied using memcpy into a fixed-size buffer...

PT-2025-35505

Name of the Vulnerable Software and Affected Versions libretro libretro-common affected versions not specified Description An out-of-bounds write issue exists in the cdfs open cue track function. This allows remote attackers to execute arbitrary code via a crafted .cue file. The issue occurs when...

Linux Distros Unpatched Vulnerability : CVE-2021-40576

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the gfisomgetpaytcount function in hinttrack.c, which allows attackers to cause ...

Linux Distros Unpatched Vulnerability : CVE-2024-1488

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime...

CCFC: Core and Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection

Jailbreak attacks pose a serious challenge to the safe deployment of large language models LLMs. We introduce CCFC Core & Core-Full-Core, a dual-track, prompt-level defense framework designed to mitigate LLMs' vulnerabilities from prompt injection and structure-aware jailbreak attacks. CCFC...

MAL-2025-35800 Malicious code in test-mlw2-mooch-track (npm)

The package test-mlw2-mooch-track was found to contain malicious code...

MAL-2025-35415 Malicious code in test-mlw2-gists-boyar-track-blood (npm)

The package test-mlw2-gists-boyar-track-blood was found to contain malicious code...

Malicious code in test-mlw2-mooch-track (npm)

The package test-mlw2-mooch-track was found to contain malicious code...

Malicious code in test-mlw2-gists-boyar-track-blood (npm)

The package test-mlw2-gists-boyar-track-blood was found to contain malicious code...

CVE-2025-7962 vulnerabilities

Vulnerabilities for packages: apache-nifi, dependency-track, keycloak, apicurio-registry, wildfly, thingsboard, jenkins, sonarqube, keycloak-config-cli...

GHSA-9342-92GG-6V29 vulnerabilities

Vulnerabilities for packages: apache-nifi, dependency-track, keycloak, apicurio-registry, wildfly, thingsboard, jenkins, sonarqube, keycloak-config-cli...

GHSA-9342-92GG-6V29 vulnerabilities

Vulnerabilities for packages: keycloak, sonarqube, jenkins, elasticsearch-fips, geoserver, thingsboard, dependency-track, commercial-elasticsearch, apache-nifi, wildfly, elasticsearch, apicurio-registry, keycloak-config-cli...

CVE-2025-7962 vulnerabilities

Vulnerabilities for packages: keycloak, sonarqube, jenkins, elasticsearch-fips, geoserver, thingsboard, dependency-track, commercial-elasticsearch, apache-nifi, wildfly, elasticsearch, apicurio-registry, keycloak-config-cli...

Use After Free

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via MediaStreamTrackImpl. An attacker can cause heap corruption by enticing a user to visit a specially...

CVE-2025-53332

Cross-Site Request Forgery CSRF vulnerability in ethoseo Track Everything track-everything allows Stored XSS.This issue affects Track Everything: from n/a through = 2.0.1...

CVE-2025-53332

Cross-Site Request Forgery CSRF vulnerability in ethoseo Track Everything track-everything allows Stored XSS.This issue affects Track Everything: from n/a through = 2.0.1...

CVE-2025-53332 WordPress Track Everything plugin <= 2.0.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in ethoseo Track Everything track-everything allows Stored XSS.This issue affects Track Everything: from n/a through = 2.0.1...