EUVD-2021-10314

Malware in sbrugna...

EUVD-2021-23486

Malware in sbrugna...

EUVD-2021-23409

Malware in sbrugna...

EUVD-2022-32881

Malicious code in bioql PyPI...

Privilege Escalation

ezsystems/ezplatform-admin-ui is vulnerable to privilege escalation. The vulnerability exists because the library does not properly handle the Company admin role, allowing an admin user to assign any role to any user...

CVE-2022-29418

CVE-2022-29418 affects the WordPress plugin Night Mode (Mark Daniels Night Mode) at versions

CVE-2022-29418

Authenticated admin user role Persistent Cross-Site Scripting XSS in Mark Daniels Night Mode plugin = 1.0.0 on WordPress via vulnerable parameters: &ntmodepagesettingenable-me, &ntmodepagesettingbg-color, &ntmodepagesettingtxt-color, &ntmodepagesettinganccolor...

CVE-2021-36910: Improper Neutralization of Input During Web Page Generation

Authenticated admin user role Stored Cross-Site Scripting XSS in WP-Appbox WordPress plugin = 4.3.20...

PT-2022-10602

Name of the Vulnerable Software and Affected Versions WP-Appbox WordPress plugin versions = 4.3.20 Description The issue is related to an Authenticated Stored Cross-Site Scripting XSS in the WP-Appbox WordPress plugin. This allows an attacker with admin user role privileges to inject malicious...

CVE-2021-25965

In Calibre-web, versions 0.6.0 to 0.6.13 are vulnerable to Cross-Site Request Forgery CSRF. By luring an authenticated user to click on a link, an attacker can create a new user role with admin privileges and attacker-controlled credentials, allowing them to take over the application...