330 matches found
WordPress PopupKit plugin <= 2.2.3 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by daroo in WordPress Plugin PopupKit versions = 2.2.3...
CVE-2025-13677
The Simple Download Counter plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.2.2. This is due to insufficient path validation in the simpledownloadcounterparsepath function. This makes it possible for authenticated attackers, with Administrator-level...
CVE-2025-13677
CVE-2025-13677 (Simple Download Counter, WordPress) is a path traversal flaw in simple_download_counter_parse_path() that, under Administrator+ access, allows reading arbitrary server files (e.g., wp-config.php). Public details indicate the issue affects all versions up to 2.2.2; Wordfence notes ...
CVE-2025-13677 Simple Download Counter <= 2.2.2 - Authenticated (Administrator+) Arbitrary File Read via Path Traversal
The Simple Download Counter plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.2.2. This is due to insufficient path validation in the simpledownloadcounterparsepath function. This makes it possible for authenticated attackers, with Administrator-level...
PT-2025-50302
The Simple Download Counter plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.2.2. This is due to insufficient path validation in the simple download counter parse path function. This makes it possible for authenticated attackers, with Administrator-leve...
CVE-2025-67543
CVE-2025-67543 : WordPress plugin Catch Themes Essential Widgets (essential-widgets) contains a Stored XSS vulnerability due to improper neutralization of input during web page generation. It affects Essential Widgets versions from unspecified earlier through 2.2.2 (inclusive). The issue enables ...
CVE-2025-64168
Agno is a multi-agent framework, runtime and control plane. From 2.0.0 to before 2.2.2, under high concurrency, when sessionstate is passed to Agent or Team during run or arun calls, a race condition can occur, causing a sessionstate to be assigned and persisted to the incorrect session. This may...
CVE-2025-64168 Agno session state overwrites between different sessions/users
Agno is a multi-agent framework, runtime and control plane. From 2.0.0 to before 2.2.2, under high concurrency, when sessionstate is passed to Agent or Team during run or arun calls, a race condition can occur, causing a sessionstate to be assigned and persisted to the incorrect session. This may...
agno 安全漏洞
agno is an Agno open source full-stack framework for building multi-intelligence systems with memory, knowledge and reasoning. A security vulnerability exists in agno version 2.0.0 through versions prior to 2.2.2, which stems from a contention condition in sessionstate passing in highly concurren...
EUVD-2006-5831
Malware in sbrugna...
EUVD-2008-2171
Malware in sbrugna...
EUVD-2004-1622
Malware in sbrugna...
EUVD-2007-3623
Malware in sbrugna...
EUVD-2023-44180
Malicious code in bioql PyPI...
EUVD-2023-34289
Malicious code in bioql PyPI...
EUVD-2023-53169
Malicious code in bioql PyPI...
EUVD-2023-57833
Malicious code in bioql PyPI...
EUVD-2023-34291
Malicious code in bioql PyPI...