Linux Distros Unpatched Vulnerability : CVE-2025-0362

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions from 7.7 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. Under certain...

Malicious code in authorize-daemon-container-awk-kernel (npm)

The package authorize-daemon-container-awk-kernel was found to contain malicious code...

Malicious code in authorize-theta-xi-quick-user (npm)

The package authorize-theta-xi-quick-user was found to contain malicious code...

Malicious code in debug-await-transpile-final-authorize (npm)

The package debug-await-transpile-final-authorize was found to contain malicious code...

Malicious code in interface-signal-encode-authorize-big (npm)

The package interface-signal-encode-authorize-big was found to contain malicious code...

Malicious code in key-sigma-dog-slow-authorize (npm)

The package key-sigma-dog-slow-authorize was found to contain malicious code...

Malicious code in xi-secure-lambda-uglify-authorize (npm)

The package xi-secure-lambda-uglify-authorize was found to contain malicious code...

MAL-2025-23274 Malicious code in interface-signal-encode-authorize-big (npm)

The package interface-signal-encode-authorize-big was found to contain malicious code...

Malicious code in view-authorize-alpha-fire-pi (npm)

The package view-authorize-alpha-fire-pi was found to contain malicious code...

MAL-2025-15099 Malicious code in authorize-interpret-notify-benchmark-protected (npm)

The package authorize-interpret-notify-benchmark-protected was found to contain malicious code...

MAL-2025-18143 Malicious code in debug-await-transpile-final-authorize (npm)

The package debug-await-transpile-final-authorize was found to contain malicious code...

MAL-2025-15100 Malicious code in authorize-theta-xi-quick-user (npm)

The package authorize-theta-xi-quick-user was found to contain malicious code...

MAL-2025-38372 Malicious code in view-authorize-alpha-fire-pi (npm)

The package view-authorize-alpha-fire-pi was found to contain malicious code...

MAL-2025-15098 Malicious code in authorize-daemon-container-awk-kernel (npm)

The package authorize-daemon-container-awk-kernel was found to contain malicious code...

MAL-2025-39766 Malicious code in xi-secure-lambda-uglify-authorize (npm)

The package xi-secure-lambda-uglify-authorize was found to contain malicious code...

WordPress plugin Accept Authorize.NET Payments Using Contact Form security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

Cloudflare Public Bug Bounty: `use-mcp`'s oauth2 process uses a window.open call with untrusted mcp server provided data allowing for code execution under the page using it

The authorizeEndpoint parameter from use-mcp version was susceptible to XSS. Sanitization of that parameter was added in version 0.0.10 of use-mcp. A skilled attacker was able to turn this XSS into code execution on the client...

CVE-2025-46487

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sftranna EC Authorize.net ec-authorizenet allows Reflected XSS.This issue affects EC Authorize.net: from n/a through = 0.3.3...

CVE-2019-20442

An issue was discovered in WSO2 API Manager 2.6.0, WSO2 Enterprise Integrator 6.5.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0. A potential stored Cross-Site Scripting XSS vulnerability in roleToAuthorize has been identified in the registry UI...

Drupal 11.x-dev - Full Path Disclosure

!/usr/bin/env python Exploit Title: Drupal 11.x-dev - Full Path Disclosure Date: 2025-04-16 Exploit Author: Milad Karimi Ex3ptionaL Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL MiRROR-H: https://mirror-h.org/search/hacker/49626/ Version: 11.x-dev CVE:...