926 matches found
WordPress Search & Go theme <= 2.7 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Search & Go versions = 2.7...
OESA-2025-2454 expat security update
expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: libexpat in Expat before version 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document...
EUVD-2025-33695
An out-of-bounds write vulnerability exists in VS6ComFile!CItemDraw::ismotiontween of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end ABEND, and arbitrary code execution...
CVE-2025-61859
CVE-2025-61859 (V-SFT) affects FUJI Electric V-SFT, specifically VS6ComFile!CItemDraw::is_motion_tween in versions 6.2.7.0 and earlier. The vulnerability is an out-of-bounds write, which opening specially crafted V-SFT files can cause information disclosure, ABEND, and arbitrary code execution. P...
CVE-2025-61532
Cross Site Scripting vulnerability in SVX Portal v.2.7A to execute arbitrary code via the TG parameter on lastheardpage.php component...
WordPress Search & Go - Directory WordPress Theme plugin <= 2.7 - Authentication Bypass to Privilege Escalation via Account Takeover vulnerability
WordPress Search & Go - Directory WordPress Theme plugin = 2.7 - Authentication Bypass to Privilege Escalation via Account Takeover vulnerability discovered by khanhhnahk1 in WordPress Theme Search & Go versions = 2.7...
EUVD-2025-32698
The Featured Image from URL FIFU plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a post's Featured Image custom fields in all versions up to, and including, 5.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
CVE-2025-7400 Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image Custom Fields
The Featured Image from URL FIFU plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a post's Featured Image custom fields in all versions up to, and including, 5.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
PT-2025-40970
Name of the Vulnerable Software and Affected Versions Featured Image from URL FIFU plugin for WordPress versions prior to 5.2.8 Description The software is susceptible to Stored Cross-Site Scripting through the Featured Image custom fields of a post. Insufficient input sanitization and output...
WordPress Featured Image from URL (FIFU) plugin <= 5.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image Custom Fields vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Featured Image Custom Fields vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Featured Image from URL versions = 5.2.7...
BIT-PYTORCH-2025-46152
In PyTorch before 2.7.0, bitwiserightshift produces incorrect output for certain out-of-bounds values of the "other" argument...
EUVD-2025-29148
Malicious code in bioql PyPI...
EUVD-2025-30740
Malicious code in bioql PyPI...
EUVD-2025-27807
Malicious code in bioql PyPI...
EUVD-2025-31211
Malicious code in bioql PyPI...
EUVD-2025-30574
Malicious code in bioql PyPI...
EUVD-2025-28693
Malicious code in bioql PyPI...
EUVD-2025-24080
Malicious code in bioql PyPI...