56 matches found
Dozzle security vulnerability
Dozzle is a small, lightweight application developed by Amir Raminfar as an individual developer. Versions of Dozzle prior to 9.0.3 contained security vulnerabilities. These vulnerabilities stemmed from defects in the Shell endpoints supported by the proxy, which could allow users to obtain...
EUVD-2025-28014
Malicious code in bioql PyPI...
EUVD-2025-3251
Malicious code in bioql PyPI...
CVE-2025-43833
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Amir Helzer Absolute Links absolute-links allows Blind SQL Injection.This issue affects Absolute Links: from n/a through = 1.1.1...
CVE-2025-43833
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Amir Helzer Absolute Links absolute-links allows Blind SQL Injection.This issue affects Absolute Links: from n/a through = 1.1.1...
CVE-2025-43833
CVE-2025-43833 affects WordPress Absolute Links plugin (≤ 1.1.1). Affected component is user-supplied input resulting in Improper Neutralization of SQL commands, enabling Blind SQL Injection. Exploitation status is not confirmed in the provided documents; CVSS v3.1 base score is 7.6 (HIGH) with n...
CVE-2025-43833 WordPress Absolute Links plugin <= 1.1.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Amir Helzer Absolute Links absolute-links allows Blind SQL Injection.This issue affects Absolute Links: from n/a through = 1.1.1...
CVE-2025-43833 WordPress Absolute Links plugin <= 1.1.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Amir Helzer Absolute Links absolute-links allows Blind SQL Injection.This issue affects Absolute Links: from n/a through = 1.1.1...
CVE-2025-43833: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Amir Helzer Absolute Links absolute-links allows Blind SQL Injection.This issue affects Absolute Links: from n/a through = 1.1.1...
CVE-2025-26888: Missing Authorization
Missing Authorization vulnerability in Amir Helzer WooCommerce Multilingual & Multicurrency woocommerce-multilingual allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Multilingual & Multicurrency: from n/a through = 5.3.8...
CVE-2025-26574: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moch Amir Google Drive WP Media google-drive-wp-media allows Stored XSS.This issue affects Google Drive WP Media: from n/a through = 2.4.4...
CVE-2025-23566
Cross-Site Request Forgery CSRF vulnerability in syedamirhussain91 Custom Post custom-post-type-gui allows Stored XSS.This issue affects Custom Post: from n/a through = 1.0...
CVE-2025-23566
Cross-Site Request Forgery CSRF vulnerability in syedamirhussain91 Custom Post custom-post-type-gui allows Stored XSS.This issue affects Custom Post: from n/a through = 1.0...
CVE-2025-23566
CVE-2025-23566 describes a Cross-Site Request Forgery (CSRF) that enables Stored XSS in the WordPress plugin named Custom Post. Affected component: Custom Post (WordPress plugin) with vulnerability chain CSRF -> Stored XSS. CVSS 3.1/3.1 metrics show Network attack vector, Low confidentiality/i...
CVE-2024-44006: Missing Authorization
Missing Authorization vulnerability in Amir Helzer WooCommerce Multilingual & Multicurrency woocommerce-multilingual.This issue affects WooCommerce Multilingual & Multicurrency: from n/a through = 5.3.6...
Malicious code in jordan-amir (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2563 Malicious code in jordan-amir (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2361 Malicious code in fca-amir-remake (npm)
--- -= Per source details. Do not edit below this line.=-...