15405 matches found
Amazon Linux 2 : unbound, --advisory ALAS2-2025-3055 (ALAS-2025-3055)
The version of unbound installed on the remote host is prior to 1.7.3-15. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3055 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
UBUNTU-CVE-2025-65073
OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization...
CVE-2025-12403
The Associados Amazon Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.8. This is due to missing or incorrect nonce validation on the brzonadminpanel function. This makes it possible for unauthenticated attackers to update settings an...
WordPress Associados Amazon plugin <= 0.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability
Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin Associados Amazon versions = 0.8...
CVE-2025-12403
CVE-2025-12403 concerns the WordPress plugin Associados Amazon Plugin (brzon) <= 0.8. Wordfence notes a Cross-Site Request Forgery (CSRF) vulnerability that leverages missing or incorrect nonce validation in brzon_admin_panel(), enabling unauthenticated attackers to trigger settings updates an...
CVE-2025-12403 Associados Amazon Plugin <= 0.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The Associados Amazon Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.8. This is due to missing or incorrect nonce validation on the brzonadminpanel function. This makes it possible for unauthenticated attackers to update settings an...
PT-2025-47130
Name of the Vulnerable Software and Affected Versions OpenStack Keystone versions prior to 26.0.1 OpenStack Keystone versions 27.0.0 OpenStack Keystone versions 28.0.0 keystone version 2:18.1.0-1+deb11u2 for Debian 11 bullseye Description The identity service, keystone, contains a flaw where...
PT-2025-44955
The Associados Amazon Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.8. This is due to missing or incorrect nonce validation on the brzon admin panel function. This makes it possible for unauthenticated attackers to update settings...
WordPress plugin Associados Amazon Plugin 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin ... A cross-site request...
Malicious code in kb-rnd-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b6374955bdacce96b2f2d1722875f0dc31dfc487a32101fad85241e8b64a4d2 The package kb-rnd-package was found to contain malicious code...
Malicious code in loaders-fbo.gov (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f7b9f592e7c3247848d84ace7b0946ea44a6d1b0b12a91563d2ccf8427e19e The package loaders-fbo.gov was found to contain malicious code...
Malicious code in pc-experience-fe-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8257ed048a6a07820b94cb55bada5ee260ab483c75647da8c506236aa890e7e5 The package pc-experience-fe-components was found to contain malicious code. Source: ghsa-malware...
MAL-2025-49331 Malicious code in 8jfiesaf83 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ef67af98dc92779c9c7da804d6673f1838980f53e7376335dae65a375877a2e The package 8jfiesaf83 was found to contain malicious code...
MAL-2025-49333 Malicious code in crediteligibilityserv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa8366bf4fe89b58935e18ad0bb36ea1e7a8ca2dfc986c233ccf23660a7a255 The package crediteligibilityserv was found to contain malicious code. Source: ghsa-malware...
MAL-2025-49337 Malicious code in dowload_ebok_spia_nella_rete_by_riccardo_meggiato_h35d1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e22257eee2fe8fd45715137c60e323af36d2ec73059759faee8b9881bc8bffff The package dowloadebokspianellaretebyriccardomeggiatoh35d1 was found to contain malicious code...
MAL-2025-49336 Malicious code in dowload_ebok_life_on_earth_by_mike_dooley_sncwl (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66c61615dbda3a1e20db3240a0b7efb05c24bc394770add24fff4f4891b6f38 The package dowloadeboklifeonearthbymikedooleysncwl was found to contain malicious code...
Malicious code in mercury-composable (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae0bbe9358cdd9f785cb91ea194f7e1e9ffa315bca07c6894651b5cfb45b865 The package mercury-composable was found to contain malicious code...
Malicious code in dowload_ebok_a_guerra_de_hitler_e_o_horror_do_holocausto_by_scott_s_f_meaker_k644u (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae459a8b847cc2f99119648a5dd79c8702ce1e7fc6e104c8288928a63579b35 The package dowloadebokaguerradehitlereohorrordoholocaustobyscottsfmeakerk644u was found to contain malicious code...
Malicious code in experience-manager-apis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e959a5d21f7ee8776c741397783dbeed1d64e6d57e97ef74bb3bc678710a8ad The package experience-manager-apis was found to contain malicious code...
Malicious code in 8jfiesaf83 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ef67af98dc92779c9c7da804d6673f1838980f53e7376335dae65a375877a2e The package 8jfiesaf83 was found to contain malicious code...