8881 matches found
PT-2025-39892
Name of the Vulnerable Software and Affected Versions Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 25.1.102 Vasion Print formerly PrinterLogic Application versions prior to 25.1.1413 Description The software contains a blind server-side request forgery SSRF issue...
CVE-2025-60109
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup LambertGroup - AllInOne - Content Slider all-in-one-contentSlider allows Blind SQL Injection.This issue affects LambertGroup - AllInOne - Content Slider: from n/a through = 3.8...
CVE-2025-60108
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Thumbnails all-in-one-thumbnailsBanner allows Blind SQL Injection.This issue affects LambertGroup - AllInOne - Banner with Thumbnails: from n/a...
CVE-2025-60109
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup LambertGroup - AllInOne - Content Slider all-in-one-contentSlider allows Blind SQL Injection.This issue affects LambertGroup - AllInOne - Content Slider: from n/a through = 3.8...
CVE-2025-60108
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Thumbnails all-in-one-thumbnailsBanner allows Blind SQL Injection.This issue affects LambertGroup - AllInOne - Banner with Thumbnails: from n/a...
CVE-2025-60107
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist allows Blind SQL Injection.This issue affects LambertGroup - AllInOne - Banner with Playlist: from n/a...
CVE-2025-60109 WordPress LambertGroup - AllInOne - Content Slider Plugin <= 3.8 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup LambertGroup - AllInOne - Content Slider all-in-one-contentSlider allows Blind SQL Injection.This issue affects LambertGroup - AllInOne - Content Slider: from n/a through = 3.8...
CVE-2025-60109 WordPress LambertGroup - AllInOne - Content Slider Plugin <= 3.8 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup LambertGroup - AllInOne - Content Slider all-in-one-contentSlider allows Blind SQL Injection.This issue affects LambertGroup - AllInOne - Content Slider: from n/a through = 3.8...
CVE-2025-60107
CVE-2025-60107 affects LambertGroup - AllInOne - Banner with Playlist (WordPress plugin). The vulnerability is an SQL Injection (authenticated) in the Banner with Playlist module, exploitable by an authenticated user with Contributor+ privileges; the issue is currently Unpatched per the LambertGr...
CVE-2025-60108 WordPress LambertGroup - AllInOne - Banner with Thumbnails Plugin <= 3.8 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Thumbnails all-in-one-thumbnailsBanner allows Blind SQL Injection.This issue affects LambertGroup - AllInOne - Banner with Thumbnails: from n/a...
CVE-2025-60108
CVE-2025-60108 (LambertGroup - AllInOne - Banner with Thumbnails) is a SQL Injection vulnerability in the WordPress plugin, allowing improper neutralization of input elements. Affected: LambertGroup - AllInOne - Banner with Thumbnails (up through version 3.8). Impact per CVSS: high confidentialit...
Malicious Package
Overview postmark-mcp is a malicious package. This is an MCP Model Context Protocol server intended to let AI assistants send emails via Postmark and it was reportedly modified to secretly exfiltrate email contents by adding a blind-copy BCC to an external domain. Note: If you have installed or...
Malicious code in postmark-mcp (npm)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security b71142d16d8ed2a6e96b93be35b1378bad054d735c90ce0ab7b20979a8c40ba4 This package turned malicious in v1.0.16 and exfiltrates email data via BCC...
MAL-2025-47604 Malicious code in postmark-mcp (npm)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security b71142d16d8ed2a6e96b93be35b1378bad054d735c90ce0ab7b20979a8c40ba4 This package turned malicious in v1.0.16 and exfiltrates email data via BCC...
PT-2025-39554
Name of the Vulnerable Software and Affected Versions LambertGroup - AllInOne - Banner with Playlist versions through 3.8 Description The software contains a flaw related to improper handling of special characters within SQL commands, potentially leading to SQL Injection. This allows for Blind SQ...
WordPress plugin LambertGroup AllInOne Content Slider SQL注入漏洞
WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL injection...
PT-2025-39556
Name of the Vulnerable Software and Affected Versions LambertGroup - AllInOne - Content Slider versions through 3.8 Description The software contains a flaw related to improper handling of special characters within SQL commands, potentially leading to SQL Injection. This allows for Blind SQL...
WordPress plugin LambertGroup - AllInOne - Banner with Thumbnails SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A SQL injection...
PT-2025-39555
Name of the Vulnerable Software and Affected Versions LambertGroup - AllInOne - Banner with Thumbnails versions through 3.8 Description A flaw exists in LambertGroup - AllInOne - Banner with Thumbnails that allows for Blind SQL Injection due to improper neutralization of special elements used in ...
