1666 matches found
CVE-2025-12919: Improper Control of Resource Identifiers
A vulnerability was detected in EverShop up to 2.0.1. Affected is an unknown function of the file /src/modules/oms/graphql/types/Order/Order.resolvers.js of the component Order Handler. The manipulation of the argument uuid results in improper control of resource identifiers. The attack may be...
PT-2025-45581
Name of the Vulnerable Software and Affected Versions EverShop versions up to 2.0.1 Description A flaw exists in EverShop related to improper control of resource identifiers. The issue is located in an unknown function within the /src/modules/oms/graphql/types/Order/Order.resolvers.js file of the...
Astra Linux – vulnerability in Firefox and Thunderbird
An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID identifying the browser, which would persist between containers and normal/private browsing modes—but not between profiles. This vulnerability was fixed in Firefox 140, Firefox ESR 115.25,...
Admidio Vulnerable to Authenticated SQL Injection in Member Assignment Functionality
Summary An authenticated SQL injection vulnerability exists in the member assignment data retrieval functionality of Admidio. Any authenticated user with permissions to assign members to a role such as an administrator can exploit this vulnerability to execute arbitrary SQL commands. This can lea...
nvme-fc Component DoS
The vulnerability of the nvme-fc component of the Linux operating system’s kernel is related to the assignment of a null pointer in the function nvmefciogetuuid within the file drivers/nvme/host/fc.c. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-10496
The Cookie Notice & Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the uuid parameter in all versions up to, and including, 1.6.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2025-10496
CVE-2025-10496 affects the WordPress plugin Cookie Notice & Consent (versions up to 1.6.5). Root cause: stored cross-site scripting via the uuid parameter due to insufficient input sanitization/output escaping. Impact: unauthenticated attackers can inject arbitrary scripts that execute when users...
CVE-2025-10496 Cookie Notice & Consent <= 1.6.5 - Unauthenticated Stored Cross-Site Scripting
The Cookie Notice & Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the uuid parameter in all versions up to, and including, 1.6.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2025-10496: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
The Cookie Notice & Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the uuid parameter in all versions up to, and including, 1.6.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
AlmaLinux 10 : firefox (ALSA-2025:10073)
The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2025:10073 advisory. firefox: Content-Disposition header ignored when a file is included in an embed or object tag CVE-2025-6430 firefox: Use-after-free in FontFaceSet...
EUVD-2021-0940
Malware in sbrugna...
EUVD-2016-1703
Malware in sbrugna...
EUVD-2019-13494
Malware in sbrugna...
EUVD-2018-0834
Malware in sbrugna...
EUVD-2010-3836
Malware in sbrugna...
EUVD-2012-5490
Malware in sbrugna...
EUVD-2020-0103
Malware in sbrugna...
EUVD-2021-26931
Malware in sbrugna...