MAL-2025-13937 Malicious code in aa-bb-xx (npm)

The package aa-bb-xx was found to contain malicious code...

Malicious code in aa-bb-xx (npm)

The package aa-bb-xx was found to contain malicious code...

CVE-2025-54054

CVE-2025-54054 : WordPress plugin “12 Step Meeting List” is affected by a Stored XSS due to improper input neutralization during web page generation. Affected versions are 12 Step Meeting List up to 3.18.3. Connected sources confirm this as a real vulnerability entry and indicate a patch exists; ...

PT-2025-33380 · Unknown · Aa Web Servant 12 Step Meeting List

Name of the Vulnerable Software and Affected Versions: AA Web Servant 12 Step Meeting List versions through 3.18.3 Description: AA Web Servant 12 Step Meeting List is susceptible to a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows fo...

CVE-2024-33545

Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10...

CVE-2024-52348

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA Extensions AA Audio Player aa-audio-player allows DOM-Based XSS.This issue affects AA Audio Player: from n/a through = 1.0...

CVE-2025-24583

Missing Authorization vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 12 Step Meeting List: from n/a through = 3.16.5...

CVE-2025-24583

Missing Authorization vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 12 Step Meeting List: from n/a through = 3.16.5...

CVE-2024-33544

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team WZone allows SQL Injection.This issue affects WZone: from n/a through 14.0.10...

CVE-2024-33546

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team WZone allows SQL Injection.This issue affects WZone: from n/a through 14.0.10...

CVE-2024-33547

Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10...

CVE-2024-33549

Improper Privilege Management vulnerability in AA-Team WZone allows Privilege Escalation.This issue affects WZone: from n/a through 14.0.10...

Malicious code in aa-bundler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd321f0852dcc9dfd3186bbde3c8ba367be98c8f8f47d93954672d5f7c702bf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-52348

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA Extensions AA Audio Player aa-audio-player allows DOM-Based XSS.This issue affects AA Audio Player: from n/a through = 1.0...

CVE-2024-52348

CVE-2024-52348 is an XSS vulnerability in the WordPress plugin AA Audio Player (“aaextention”), described as DOM-based XSS caused by improper input neutralization during web page generation. Affected versions are listed as n/a through 1.0. Public sources in the Connected documents reiterate the s...

PT-2024-35189 · Unknown · Aa Audio Player

Name of the Vulnerable Software and Affected Versions: AA Audio Player versions n/a through 1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. Specifically, it is a DOM-Based XSS vulnerability. This means...

WordPress plugin AA Audio Player 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

MAL-2024-10234 Malicious code in viem-aa-sdk-compatible (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bec68a21bfe31654a412ae6b261f9af4acb88ddd4bf645499f7e6ea15cc3c255 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in viem-aa-sdk-compatible (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bec68a21bfe31654a412ae6b261f9af4acb88ddd4bf645499f7e6ea15cc3c255 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-39220

CVE-2024-39220 affects BAS-IP AV-, AA-, BA-, and CR-02BD products (before firmware v3.9.2). An authenticated attacker can read SIP account passwords via a crafted GET request, exposing SIP credentials (confidentiality impact high). The vulnerability is exploitable over network with low complexity...