1932 matches found
PT-2025-44239
Name of the Vulnerable Software and Affected Versions highwarden Super Store Finder versions through 7.5 Description The software contains a Cross-Site Request Forgery CSRF issue. This allows attackers to potentially perform actions on behalf of authenticated users without their knowledge...
PT-2025-44311
Name of the Vulnerable Software and Affected Versions CKAN versions prior to 2.10.9 CKAN versions prior to 2.11.4 Description CKAN, an open-source data management system, contains a flaw in the helpers.markdown extract function. Insufficient input sanitization before wrapping data in an HTML...
KLA89736 ACE vulnerability in Mozilla Firefox
Use-after-free vulnerability was found in Mozilla Firefox. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories MFSA2025-86 Related products Mozilla-Firefox CVE list CVE-2025-12380 unknown Solution Update to the latest version Download Firefox Impacts ACE...
PT-2025-43864
Name of the Vulnerable Software and Affected Versions Waituk Entrada theme versions through 5.7.7 Description A Cross-Site Request Forgery CSRF issue exists in the Waituk Entrada theme. This allows attackers to perform actions on behalf of authenticated users without their knowledge. The...
PT-2025-43966
Name of the Vulnerable Software and Affected Versions privacyIDEA Authenticator version 4.3.0 Description A flaw exists in the handling of OTP/TOTP/HOTP values within the privacyIDEA Authenticator application on Android. A local attacker with root access can bypass two-factor authentication by...
PT-2025-43720
Name of the Vulnerable Software and Affected Versions Advanced Database Cleaner plugin for WordPress versions up to and including 3.1.6 Description The Advanced Database Cleaner plugin for WordPress is susceptible to a Cross-Site Request Forgery CSRF issue. This is caused by insufficient or...
PT-2025-43553
Name of the Vulnerable Software and Affected Versions UniFi Access Application versions 3.3.22 through 3.4.31 Description A misconfiguration in the UniFi Access application exposes a management API without proper authentication. An attacker with access to the management network could exploit this...
PT-2025-43961
Name of the Vulnerable Software and Affected Versions Docker Desktop versions through 4.48.0 Description The Docker Desktop Installer.exe is susceptible to a DLL hijacking issue stemming from an insecure DLL search order. The installer prioritizes searching for necessary DLLs within the user's...
PT-2025-43239
Name of the Vulnerable Software and Affected Versions IDonatePro versions through 2.1.9 Description A flaw exists in ThemeAtelier IDonatePro that allows the retrieval of embedded sensitive data, potentially exposing sensitive system information to an unauthorized control sphere. Recommendations...
PT-2025-43230
Name of the Vulnerable Software and Affected Versions Wikimedia Foundation Wikipedia Preview versions through 1.15.0 Description An authorization issue exists in Wikimedia Foundation Wikipedia Preview. The issue involves incorrectly configured access control security levels, potentially allowing...
PT-2025-43193
Name of the Vulnerable Software and Affected Versions Ultimate Blocks versions through 3.3.6 Description The software contains a flaw related to improper input handling during web page creation, which can lead to Cross-site Scripting XSS. This allows for the injection of malicious scripts into we...
PT-2025-43254
Name of the Vulnerable Software and Affected Versions Toast Mobile Menu versions through 1.0.7 Description The Toast Mobile Menu plugin contains a flaw related to improper input handling during web page creation, which allows for Stored Cross-site Scripting XSS. This means that malicious scripts...
PT-2025-43227
Name of the Vulnerable Software and Affected Versions XLPlugins NextMove Lite versions through 2.21.0 Description The software contains a flaw related to improper input handling during web page generation, which allows for Reflected Cross-site Scripting XSS. This issue is present in the...
PT-2025-42981
Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.12 and 7.2.2 Description A difficult-to-exploit issue exists in the Oracle VM VirtualBox product, specifically within the Core component. A low-privileged attacker with access to the system where Oracle VM...
Siemens HyperLynx and Industrial Edge App Publisher
SUMMARY Multiple Siemens products are affected by a type confusion vulnerability in Google Chrome prior to 138.0.7204.96. This could allow a remote attacker to perform arbitrary code execution via a crafted HTML page. Siemens has released a new version for Industrial Edge App Publisher and...
EUVD-2017-0107
Malware in sbrugna...
EUVD-2021-2442
Malware in sbrugna...
EUVD-2020-29748
Malware in sbrugna...