MAL-2025-35800 Malicious code in test-mlw2-mooch-track (npm)

The package test-mlw2-mooch-track was found to contain malicious code...

MAL-2025-35415 Malicious code in test-mlw2-gists-boyar-track-blood (npm)

The package test-mlw2-gists-boyar-track-blood was found to contain malicious code...

CVE-2025-7962 vulnerabilities

Vulnerabilities for packages: jenkins, wildfly, apicurio-registry, keycloak-config-cli, thingsboard, dependency-track, sonarqube, apache-nifi, keycloak...

GHSA-9342-92GG-6V29 vulnerabilities

Vulnerabilities for packages: jenkins, wildfly, apicurio-registry, keycloak-config-cli, thingsboard, dependency-track, sonarqube, apache-nifi, keycloak...

GHSA-9342-92GG-6V29 vulnerabilities

Vulnerabilities for packages: apache-nifi, jenkins, elasticsearch-fips, commercial-elasticsearch, wildfly, elasticsearch, keycloak-config-cli, dependency-track, keycloak, apicurio-registry, sonarqube, thingsboard, geoserver...

CVE-2025-7962 vulnerabilities

Vulnerabilities for packages: apache-nifi, jenkins, elasticsearch-fips, commercial-elasticsearch, wildfly, elasticsearch, keycloak-config-cli, dependency-track, keycloak, apicurio-registry, sonarqube, thingsboard, geoserver...

Use After Free

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via MediaStreamTrackImpl. An attacker can cause heap corruption by enticing a user to visit a specially...

CVE-2025-53332

Cross-Site Request Forgery CSRF vulnerability in ethoseo Track Everything track-everything allows Stored XSS.This issue affects Track Everything: from n/a through = 2.0.1...

CVE-2025-53332

Cross-Site Request Forgery CSRF vulnerability in ethoseo Track Everything track-everything allows Stored XSS.This issue affects Track Everything: from n/a through = 2.0.1...

CVE-2025-53332 WordPress Track Everything plugin <= 2.0.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in ethoseo Track Everything track-everything allows Stored XSS.This issue affects Track Everything: from n/a through = 2.0.1...

CVE-2025-53332

CVE-2025-53332 : A CSRF vulnerability in the WordPress Track Everything plugin can enable Stored XSS. Affected versions are listed as n/a through 2.0.1. The CVSS v3.1 base score is 7.1 (High) with network attack vector, low attack complexity, no privileges required, user interaction required, and...

CVE-2025-53332 WordPress Track Everything plugin <= 2.0.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in ethoseo Track Everything allows Stored XSS. This issue affects Track Everything: from n/a through 2.0.1...

WordPress plugin Track Everything 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

CVE-2025-53332: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ethoseo Track Everything track-everything allows Stored XSS.This issue affects Track Everything: from n/a through = 2.0.1...

CVE-2025-6258: Improper Neutralization of Input During Web Page Generation

The WP SoundSystem plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpsstm-track shortcode in all versions up to, and including, 3.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2025-095 (ALASKERNEL-5.10-2025-095)

The version of kernel installed on the remote host is prior to 5.10.238-231.953. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2025-095 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix WRITESAME No Data...

CVE-2025-48145

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michal Jaworski Track, Analyze & Optimize by WP Tao wp-tao allows Reflected XSS.This issue affects Track, Analyze & Optimize by WP Tao: from n/a through = 1.3...

CVE-2025-6201: Improper Neutralization of Input During Web Page Generation

The Pixel Manager for WooCommerce – Track Conversions and Analytics, Google Ads, TikTok and more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's conversion-pixel in all versions up to, and including, 1.49.0 due to insufficient input sanitization and output...

CVE-2025-48145

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michal Jaworski Track, Analyze & Optimize by WP Tao wp-tao allows Reflected XSS.This issue affects Track, Analyze & Optimize by WP Tao: from n/a through = 1.3...

WordPress plugin Track, Analyze & Optimize by WP Tao 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...