CVE-2025-11889 AIO Forms <= 1.3.18 - Authenticated (Admin+) Arbitrary File Upload via Zip Import

The AIO Forms – Craft Complex Forms Easily plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the import functionality in all versions up to, and including, 1.3.18. This makes it possible for authenticated attackers, with Administrator-level access...

CVE-2025-11889

CVE-2025-11889 : WordPress plugin AIO Forms – Craft Complex Forms Easily is vulnerable to authenticated arbitrary file upload via the Zip Import feature due to missing file type validation in versions up to and including 1.3.15 . The flaw allows users with Administrator-level access and above to ...

CVE-2025-11889 AIO Forms <= 1.3.15 - Authenticated (Admin+) Arbitrary File Upload via Zip Import

The AIO Forms – Craft Complex Forms Easily plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the import functionality in all versions up to, and including, 1.3.15. This makes it possible for authenticated attackers, with Administrator-level access...

PT-2025-43595

Name of the Vulnerable Software and Affected Versions AIO Forms – Craft Complex Forms Easily plugin for WordPress versions through 1.3.15 Description The AIO Forms – Craft Complex Forms Easily plugin for WordPress is susceptible to arbitrary file uploads because of a lack of file type validation...

WordPress AIO Forms plugin <= 1.3.18 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by tmrswrr in WordPress Plugin AIO Forms versions = 1.3.18...

CVE-2025-6833 All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Clocking In/Out

The All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0 via the 'aiotimeclocklitejs' AJAX action due to missing validation on a user controlled key. This makes it...

EUVD-2009-0141

Malware in sbrugna...

EUVD-2012-6543

Malware in sbrugna...

EUVD-2001-1166

Malware in sbrugna...

EUVD-2019-2062

Malware in sbrugna...

EUVD-2008-2840

Malware in sbrugna...

EUVD-2005-0917

Malware in sbrugna...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987156)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987156 advisory. In the Linux kernel, the following vulnerability has been resolved: aio: fix mremap after fork null-deref Commit e4a0d3e720e7 aio: Make it possible to remap aio ring...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987050)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987050 advisory. In the Linux kernel, the following vulnerability has been resolved: aio: fix use-after-free due to missing POLLFREE handling signalfdpoll and binderpoll are special ...

EUVD-2025-9233

Malicious code in bioql PyPI...

EUVD-2025-8479

Malicious code in bioql PyPI...

EUVD-2025-3823

Malicious code in bioql PyPI...

EUVD-2024-52346

Malicious code in bioql PyPI...

EUVD-2024-52345

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-53344

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: bcm: bcmtxsetup: fix KMSAN uninit-value in vfswrite Syzkaller reported the following issue: ===================================================== BUG: KMSA...