1282 matches found
CVE-2025-9203 Media Player Addons for Elementor <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widget Fields
The Media Player Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'subtitlessize', 'tracktitle', and 'trackartistname' parameters in version 1.0.5. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This...
CVE-2025-9203
CVE-2025-9203 concerns the WordPress plugin Media Player Addons for Elementor (versions ≤ 1.0.5). The issue is Stored Cross-Site Scripting caused by insufficient input sanitization and output escaping for the parameters subtitle_ssize , track_title , and track_artist_name . With contributor-level...
WordPress plugin Media Player Addons for Elementor 跨站脚本漏洞
WordPress Media Player Addons for Elementor plugin is a plugin designed for Elementor page builder, mainly used to extend the media playback functionality. A cross-site scripting vulnerability exists in the WordPress Media Player Addons for Elementor plugin, which stems from insufficient input...
PT-2025-38121
Name of the Vulnerable Software and Affected Versions: Media Player Addons for Elementor plugin for WordPress version 1.0.5 Description: The Media Player Addons for Elementor plugin for WordPress is susceptible to Stored Cross-Site Scripting due to insufficient input sanitization and output...
PT-2025-36988
Name of the Vulnerable Software and Affected Versions: Zoom Workplace VDI Plugin versions prior to 6.4.10 Zoom Workplace VDI Plugin versions prior to 6.2.15 Zoom Workplace VDI Plugin versions prior to 6.3.12 Description: A race condition exists in the Zoom Workplace VDI Plugin macOS Universal...
CVE-2025-9809
Out-of-bounds write in cdfsopencuetrack in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .cue file with a file path exceeding PATHMAXLENGTH that is copied using memcpy into a fixed-size buffer...
PT-2025-35505
Name of the Vulnerable Software and Affected Versions libretro libretro-common affected versions not specified Description An out-of-bounds write issue exists in the cdfs open cue track function. This allows remote attackers to execute arbitrary code via a crafted .cue file. The issue occurs when...
Linux Distros Unpatched Vulnerability : CVE-2021-40576
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the gfisomgetpaytcount function in hinttrack.c, which allows attackers to cause ...
Linux Distros Unpatched Vulnerability : CVE-2024-1488
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime...
CCFC: Core and Core-Full-Core Dual-Track Defense for LLM Jailbreak Protection
Jailbreak attacks pose a serious challenge to the safe deployment of large language models LLMs. We introduce CCFC Core & Core-Full-Core, a dual-track, prompt-level defense framework designed to mitigate LLMs' vulnerabilities from prompt injection and structure-aware jailbreak attacks. CCFC...
MAL-2025-35800 Malicious code in test-mlw2-mooch-track (npm)
The package test-mlw2-mooch-track was found to contain malicious code...
MAL-2025-35415 Malicious code in test-mlw2-gists-boyar-track-blood (npm)
The package test-mlw2-gists-boyar-track-blood was found to contain malicious code...
Malicious code in test-mlw2-gists-boyar-track-blood (npm)
The package test-mlw2-gists-boyar-track-blood was found to contain malicious code...
Malicious code in test-mlw2-mooch-track (npm)
The package test-mlw2-mooch-track was found to contain malicious code...
CVE-2025-7962 vulnerabilities
Vulnerabilities for packages: apache-nifi, jenkins, keycloak, dependency-track, keycloak-config-cli, wildfly, thingsboard, apicurio-registry...
GHSA-9342-92GG-6V29 vulnerabilities
Vulnerabilities for packages: apache-nifi, jenkins, keycloak, dependency-track, keycloak-config-cli, wildfly, thingsboard, apicurio-registry...
GHSA-9342-92GG-6V29 vulnerabilities
Vulnerabilities for packages: keycloak, thingsboard, elasticsearch, wildfly, elasticsearch-fips, apache-nifi, dependency-track, keycloak-config-cli, jenkins, geoserver, apicurio-registry...
CVE-2025-7962 vulnerabilities
Vulnerabilities for packages: keycloak, thingsboard, elasticsearch, wildfly, elasticsearch-fips, apache-nifi, dependency-track, keycloak-config-cli, jenkins, geoserver, apicurio-registry...
Use After Free
Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via MediaStreamTrackImpl. An attacker can cause heap corruption by enticing a user to visit a specially...
