MAL-2025-7326 Malicious code in @crabas0npm/fugiat-molestias-ab (npm)

The package @crabas0npm/fugiat-molestias-ab was found to contain malicious code...

MAL-2025-13847 Malicious code in @zittertea/ab-dolor-optio-sint (npm)

The package @zittertea/ab-dolor-optio-sint was found to contain malicious code...

MAL-2025-7933 Malicious code in @erboladaiteas/voluptatibus-ab (npm)

The package @erboladaiteas/voluptatibus-ab was found to contain malicious code...

MAL-2025-9152 Malicious code in @patrten/ab-omnis-tenetur (npm)

The package @patrten/ab-omnis-tenetur was found to contain malicious code...

MAL-2025-7144 Malicious code in @crabas0npm/ab-non-mollitia (npm)

The package @crabas0npm/ab-non-mollitia was found to contain malicious code...

CVE-2024-37382

An issue discovered in import host feature in Ab Initio Metadata Hub and Authorization Gateway before 4.3.1.1 allows attackers to run arbitrary code via crafted modification of server configuration...

CVE-2021-33408

Local File Inclusion vulnerability in Ab Initio ControlCenter before 4.0.2.6 allows remote attackers to retrieve arbitrary files. Fixed in v4.0.2.6 and v4.0.3.1...

CVE-2016-10926

The nelio-ab-testing plugin before 4.5.9 for WordPress has SSRF in ajax/iesupport.php...

RefindPlus 安全漏洞

RefindPlus is RefindPlusRepo open source a boot manager for Mac and PC. A security vulnerability exists in RefindPlus version 0.14.2.AB, which stems from a null pointer dereference due to the function InternalApfsTranslateBlock operation in the file RPApfsIo.c. The vulnerability is caused by a nu...

RefindPlus 安全漏洞

RefindPlus is an open source boot manager for Mac and PC by RefindPlusRepo. A security vulnerability exists in RefindPlus version 0.14.2.AB, which stems from a null pointer dereference due to the GetDebugLogFile operation of the function in the file BootLog.c. The vulnerability is caused by a nul...

CVE-2025-31613

Cross-Site Request Forgery CSRF vulnerability in Aboobacker. AB Google Map Travel ab-google-map-travel allows Cross Site Request Forgery.This issue affects AB Google Map Travel : from n/a through = 4.6...

WordPress AB Google Map Travel plugin <= 4.6 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin AB Google Map Travel versions = 4.6...

CVE-2025-31613

CVE-2025-31613 is a CSRF to Stored XSS vulnerability affecting the AB Google Map Travel (AB-MAP) WordPress plugin, with exploitation tied to AB Google Map Travel before or up to version 4.6. The Wordfence vulnerability report lists AB Google Map Travel

WordPress plugin AB Google Map Travel 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2025-1363

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is...

CVE-2025-1362

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks...

CVE-2025-1363

CVE-2025-1363 affects the WordPress plugin “URL Shortener | Conversion Tracking | AB Testing | WooCommerce” (versions up to 9.0.2). The vulnerability is a Stored Cross-Site Scripting (XSS) that occurs due to insufficient sanitisation/escaping of certain plugin settings, enabling a high-privilege ...

CVE-2024-13868

The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2025-2049

A vulnerability classified as problematic has been found in code-projects Blood Bank System 1.0. Affected is an unknown function of the file AB+.php. The manipulation of the argument Bloodname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-2049 code-projects Blood Bank System AB+.php cross site scripting

A vulnerability classified as problematic has been found in code-projects Blood Bank System 1.0. Affected is an unknown function of the file AB+.php. The manipulation of the argument Bloodname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...