CVE-2019-19873

An issue was discovered in B Industrial Automation APROL before R4.2 V7.08. An attacker can get information from the AprolSqlServer DBMS by bypassing authentication, a different vulnerability than CVE-2019-16356 and CVE-2019-9983...

CVE-2019-19872

An issue was discovered in B Industrial Automation APROL before R4.2 V7.08. The AprolLoader could be used to inject and execute arbitrary unintended commands via an unspecified attack scenario, a different vulnerability than CVE-2019-16364...

CVE-2019-19876

An issue was discovered in B Industrial Automation APROL before R4.2 V7.08. An EnMon PHP script was vulnerable to SQL injection, a different vulnerability than CVE-2019-10006...

CVE-2019-19875

An issue was discovered in B Industrial Automation APROL before R4.2 V7.08. Arbitrary commands could be injected using Python scripts via the AprolCluster script that is invoked via sudo and thus executes with root privileges, a different vulnerability than CVE-2019-16364...

CVE-2019-19102

A directory traversal vulnerability in SharpZipLib used in the upgrade service in B Automation Studio versions 4.0.x, 4.1.x and 4.2.x allow unauthenticated users to write to certain local directories. The vulnerability is also known as zip slip...

CVE-2019-19878

An issue was discovered in B Industrial Automation APROL before R4.2 V7.08. An attacker can get access to historical data from AprolSqlServer by bypassing authentication, a different vulnerability than CVE-2019-16358...

Malicious code in core_plugin_b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b017d4d66c75e5abd747ac42ebec3611c23c459b9d627c55156dffafb700258a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-4762

creationtimestamp| type| source ---|---|--- 2025-05-15 15:03:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp7rvhgzdo2e...

Malicious code in dep-b (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bf502f4603015140b50f4fa201c46f256eefa3553e9a6f91ae9304bb42966d6 Any computer that has this package installed or running should be considered...

CVE-2022-49850

CVE-2022-49850 affects the Linux kernel nilfs2 subsystem. A semaphore deadlock can occur when nilfs_get_block() detects metadata corruption during data-block allocation and a concurrent superblock writeback happens. The root cause involves a lock order: rwsem A (NILFS_MDT dat_inode mi_sem) read l...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from btrfs not initializing device zone information, which could lead to null pointer dereference...

CVE-2023-42007

creationtimestamp| type| source ---|---|--- 2025-04-10 15:32:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmhta427jp2i 2025-04-10 17:52:12+00:00| seen| https://t.me/cvedetector/22661...

CVE-2025-32173

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins B Blocks b-blocks allows Stored XSS.This issue affects B Blocks: from n/a through = 2.0.0...

CVE-2025-32173

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins B Blocks b-blocks allows Stored XSS.This issue affects B Blocks: from n/a through = 2.0.0...

CVE-2025-32173

CVE-2025-32173 affects B Blocks – The ultimate block collection (WordPress) up to version 2.0.0, with a Stored XSS due to improper input neutralization during web page generation. The connected Wordfence listing confirms the issue and notes the vulnerability is patched; no exploit details are pro...

CVE-2025-32173 WordPress B Blocks - The ultimate block collection plugin <= 2.0.0 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins B Blocks - The ultimate block collection allows Stored XSS. This issue affects B Blocks - The ultimate block collection: from n/a through 2.0.0...

WordPress B Blocks plugin <= 2.0.0 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by Logan Cote in WordPress Plugin B Blocks versions = 2.0.0...

WordPress plugin B Blocks - The ultimate block collection 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin B Blocks - The ultimate block...

CVE-2024-13553

creationtimestamp| type| source ---|---|--- 2025-04-01 11:34:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9873 2025-04-01 12:40:17+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llqvfffeth2v 2025-04-01 13:48:33+00:00| seen|...

CVE-2024-8315

An Improper Handling of Insufficient Permissions or Privileges vulnerability in scripts used in B APROL 4.4-00P5 may allow an authenticated local attacker to read credential information...