326 matches found
EUVD-2022-6520
Malicious code in bioql PyPI...
EUVD-2023-57833
Malicious code in bioql PyPI...
CVE-2025-61583 TS3 Manager is vulnerable to unauthenticated reflected XSS attack due to insecure error handling
TS3 Manager is modern web interface for maintaining Teamspeak3 servers. A reflected cross-site scripting vulnerability has been identified in versions 2.2.1 and earlier. The vulnerability exists in the error handling mechanism of the login page, where malicious scripts embedded in server hostname...
PT-2025-40307
Name of the Vulnerable Software and Affected Versions TS3 Manager versions prior to 2.2.2 Description TS3 Manager, a web interface for Teamspeak3 servers, contains a reflected cross-site scripting issue. The problem resides in the login page's error handling, specifically when processing server...
PT-2025-40306
Name of the Vulnerable Software and Affected Versions TS3 Manager versions 2.2.1 and earlier Description TS3 Manager, a web interface for Teamspeak3 servers, contains a flaw that allows an unauthenticated attacker to terminate the application. This occurs by submitting specially crafted Unicode...
AZL-67968 CVE-2025-55560 affecting package pytorch for versions less than 2.2.2-9
An issue in pytorch v2.7.0 can lead to a Denial of Service DoS when a PyTorch model consists of torch.Tensor.tosparse and torch.Tensor.todense and is compiled by Inductor...
AZL-67884 CVE-2025-46152 affecting package pytorch for versions less than 2.2.2-9
In PyTorch before 2.7.0, bitwiserightshift produces incorrect output for certain out-of-bounds values of the "other" argument...
CVE-2025-58632
CVE-2025-58632 is a stored XSS vulnerability in the Dadevarzan WordPress Common plugin (
PT-2025-35762
Name of the Vulnerable Software and Affected Versions: Dadevarzan WordPress Common versions through 2.2.2 Description: The software contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks. Recommendations:...
CVE-2025-48350
Missing Authorization vulnerability in Basar Ventures AutoWP autowp-ai-content-writer-rewriter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AutoWP: from n/a through = 2.2.8...
CVE-2025-48350
Missing Authorization vulnerability in Basar Ventures AutoWP autowp-ai-content-writer-rewriter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AutoWP: from n/a through = 2.2.7...
CVE-2025-48350 WordPress AutoWP plugin <= 2.2.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Neuralabz LTD AutoWP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AutoWP: from n/a through 2.2.2...
OPENSUSE-SU-2025:15186-1 openbao-2.2.2-1.1 on GA media
These are all security issues fixed in the openbao-2.2.2-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-47672
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in miniOrange miniOrange Discord Integration miniorange-discord-integration allows PHP Local File Inclusion.This issue affects miniOrange Discord Integration: from n/a through = 2.2...
CVE-2025-47672 WordPress miniOrange Discord Integration <= 2.2.2 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in miniOrange miniOrange Discord Integration allows PHP Local File Inclusion. This issue affects miniOrange Discord Integration: from n/a through 2.2.2...
CVE-2024-54315
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicheaddons Events Addon for Elementor events-addon-for-elementor allows DOM-Based XSS.This issue affects Events Addon for Elementor: from n/a through = 2.2.2...
CVE-2024-51810
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in George Lewe Lewe Bootstrap Visuals shortcode-bootstrap-visuals allows Stored XSS.This issue affects Lewe Bootstrap Visuals: from n/a through = 3.0.1...
CVE-2023-5690
Cross-Site Request Forgery CSRF in GitHub repository modoboa/modoboa prior to 2.2.2...