5235 matches found
MAL-2025-43338 Malicious code in @zalastax/nolb-lion-lib-b (npm)
The package @zalastax/nolb-lion-lib-b was found to contain malicious code...
WordPress Plugin B Slider Access Control Break Vulnerability
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control disruption vulnerability exists in WordPress plugin B Slider, which stems from a lack ...
CVE-2025-54734
Missing Authorization vulnerability in bPlugins B Slider b-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects B Slider: from n/a through = 1.1.30...
CVE-2025-54734
Missing Authorization vulnerability in bPlugins B Slider b-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects B Slider: from n/a through = 1.1.30...
CVE-2025-54734 WordPress B Slider Plugin <= 1.1.30 - Broken Access Control Vulnerability
Missing Authorization vulnerability in bPlugins B Slider b-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects B Slider: from n/a through = 1.1.30...
CVE-2025-54734 WordPress B Slider Plugin <= 1.1.30 - Broken Access Control Vulnerability
Missing Authorization vulnerability in bPlugins B Slider allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects B Slider: from n/a through 1.1.30...
CVE-2025-54734
CVE-2025-54734 describes a Missing Authorization vulnerability in the WordPress plugin B Slider (bPlugins) affecting versions up to and including 1.1.30 . The issue arises from incorrect access control, enabling exploitation of misconfigured security levels. According to multiple sources, the CVE...
WordPress plugin B Slider 安全漏洞
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control disruption vulnerability exists in WordPress plugin B Slider, which stems from a lack ...
PT-2025-35076
Name of the Vulnerable Software and Affected Versions: bPlugins B Slider versions through 1.1.30 Description: The software contains a missing authorization issue that allows exploiting incorrectly configured access control security levels. Recommendations: At the moment, there is no information...
WordPress B Slider Plugin <= 1.1.30 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Denver Jackson in WordPress Plugin B Slider versions = 1.1.30...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-36028: mm/hugetlb: fix DEBUGLOCKSWARNON1 when dissolvefreehugetlbfolio bsc1225707. CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357:...
MAL-2025-41322 Malicious code in rush-b (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 94450add30af54a15bf43058886e06c741fa6040846b8b23301194b2f412d6a1 The OpenSSF Package Analysis project identified 'rush-b' @ 99.0.9 npm...
Malicious code in rush-b (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 94450add30af54a15bf43058886e06c741fa6040846b8b23301194b2f412d6a1 The OpenSSF Package Analysis project identified 'rush-b' @ 99.0.9 npm...
Malicious code in other-pkg-b (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ab79e006d7046832f724293ad8a66618e70b615bb6e223169ac1bda1cae5d4df The OpenSSF Package Analysis project identified 'other-pkg-b' @ 99.0....
MAL-2025-41314 Malicious code in other-pkg-b (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ab79e006d7046832f724293ad8a66618e70b615bb6e223169ac1bda1cae5d4df The OpenSSF Package Analysis project identified 'other-pkg-b' @ 99.0....
CVE-2025-50860
SQL Injection in the listdomains function in Easy Hosting Control Panel EHCP 20.04.1.b allows authenticated attackers to access or manipulate database contents via the arananalan POST parameter...
CVE-2025-50859
Reflected Cross-Site Scripting in the Change Template function in Easy Hosting Control Panel EHCP 20.04.1.b allows authenticated attackers to execute arbitrary JavaScript via the template parameter...
CVE-2025-50858
Reflected Cross-Site Scripting in the List MySQL Databases function in Easy Hosting Control Panel EHCP 20.04.1.b allows authenticated attackers to execute arbitrary JavaScript via the action parameter...
EHCP Easy Hosting Control Panel 安全漏洞
EHCP Easy Hosting Control Panel is an open source web hosting control panel from EHCP. A security vulnerability exists in EHCP Easy Hosting Control Panel version 20.04.1.b. The vulnerability stems from a reflective cross-site scripting vulnerability in the action parameter of the List MySQL...
PT-2025-34486 · Unknown · Easy Hosting Control Panel
Name of the Vulnerable Software and Affected Versions: Easy Hosting Control Panel EHCP version 20.04.1.b Description: The Change Template function in Easy Hosting Control Panel EHCP is susceptible to a reflected cross-site scripting issue. Authenticated attackers can execute arbitrary JavaScript...