491 matches found
EUVD-2015-0890
Malware in sbrugna...
EUVD-2006-1557
Malware in sbrugna...
EUVD-2007-4151
Malware in sbrugna...
EUVD-2005-4647
Malware in sbrugna...
CVE-2025-10383
The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple form field parameters in all versions up to, and including, 27.0.2. This is due to insufficient input sanitization and output escaping on user-supplied...
EUVD-2024-43289
Malicious code in bioql PyPI...
EUVD-2025-5136
Malicious code in bioql PyPI...
Malicious code in @zalastax/nolb-al_ (npm)
The package @zalastax/nolb-al was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2019-18345
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A reflected XSS issue was discovered in DAViCal through 1.1.8. It echoes the action parameter without encoding. If a user visits an attacker-supplied link, the...
WordPress AL Pack plugin unauthorized access vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. An unauthorized access vulnerability exists in the WordPress AL Pack plugin, which stems from a lack of functionality checking of the checkactivatepermission permission callback...
“Serial Hacker” Sentenced to 20 Months in UK Prison
Rotherham hacker Al-Tahery Al-Mashriky jailed for 20 months after global cyberattacks, stealing millions of logins and targeting government…...
CVE-2025-7664
The AL Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the checkactivatepermission permission callback for the /wp-json/presslearn/v1/activate REST API endpoint in all versions up to, and including, 1.1.1. The callback reads the client-supplied...
CVE-2025-7664 Al Pack <= 1.1.1 - Missing Authorization to Unauthenticated Premium Feature Activation via check_activate_permission Function
The AL Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the checkactivatepermission permission callback for the /wp-json/presslearn/v1/activate REST API endpoint in all versions up to, and including, 1.1.1. The callback reads the client-supplied...
WordPress plugin AL Pack 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. An unauthorized access vulnerability exists in the WordPress AL Pack plugin, which stems from a lack of functionality checking of the checkactivatepermission permission callback...
PT-2025-33530 · WordPress · Al Pack For Wordpress
Name of the Vulnerable Software and Affected Versions: AL Pack for WordPress versions up to and including 1.0.2 Description: The AL Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the check activate permission permission callback for the...
Malicious code in a-vailable-al-bum-file-sonic-boom-5n6il-dbjjlw (npm)
The package a-vailable-al-bum-file-sonic-boom-5n6il-dbjjlw was found to contain malicious code...
MAL-2025-27349 Malicious code in new-al-bum-av-ailable-532141-nothing-special-3hobm-scpavd (npm)
The package new-al-bum-av-ailable-532141-nothing-special-3hobm-scpavd was found to contain malicious code...
Malicious code in a-vailable-al-bum-file-192011-from-this-place-nx95v-minwrk (npm)
The package a-vailable-al-bum-file-192011-from-this-place-nx95v-minwrk was found to contain malicious code...