Directus 跨站脚本漏洞

Directus is a real-time Api and application dashboard from Directus Open Source. It is used to manage Sql database content. A cross-site scripting vulnerability exists in Directus versions prior to 11.13.0, which stems from a stored cross-site scripting vulnerability in the Block Editor interface...

EUVD-2020-3415

Malware in sbrugna...

EUVD-2020-26691

Malware in sbrugna...

EUVD-2021-11458

Malware in sbrugna...

EUVD-2025-4747

Malicious code in bioql PyPI...

EUVD-2025-21851

Malicious code in bioql PyPI...

EUVD-2024-31309

Malicious code in bioql PyPI...

EUVD-2024-34023

Malicious code in bioql PyPI...

EUVD-2024-45110

Malicious code in bioql PyPI...

EUVD-2024-28356

Malicious code in bioql PyPI...

EUVD-2024-30388

Malicious code in bioql PyPI...

EUVD-2024-27738

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2019-16780

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress users with lower privileges like contributors can inject JavaScript code in the block editor using a specific payload, which is executed within the...

Linux Distros Unpatched Vulnerability : CVE-2021-39203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. In affected versions authenticated use...

Linux Distros Unpatched Vulnerability : CVE-2020-11030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In affected versions of WordPress, a special payload can be crafted that can lead to scripts getting executed within the search block of the block editor. This...

Linux Distros Unpatched Vulnerability : CVE-2019-16781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In WordPress before 5.3.1, authenticated users with lower privileges like contributors can inject JavaScript code in the block editor, which is executed within...

CVE-2025-6726 Block Editor Gallery Slider <= 1.1.1 - Missing Authorization to Authenticated (Subscriber+) Limited Post Meta Update

The Block Editor Gallery Slider plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the classicgalleryslideroptions function in all versions up to, and including, 1.1.1. This makes it possible for authenticated attackers, with...

CVE-2025-6726 Block Editor Gallery Slider <= 1.1.1 - Missing Authorization to Authenticated (Subscriber+) Limited Post Meta Update

The Block Editor Gallery Slider plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the classicgalleryslideroptions function in all versions up to, and including, 1.1.1. This makes it possible for authenticated attackers, with...

CVE-2025-6726

CVE-2025-6726 relates to the Block Editor Gallery Slider WordPress plugin. The Wordfence/NVD entry states a missing capability check in classic_gallery_slider_options() affects all versions up to and including 1.1.1, enabling authenticated users with Subscriber-level access or higher to modify li...

PT-2025-30003 · WordPress · Block Editor Gallery Slider

Name of the Vulnerable Software and Affected Versions: Block Editor Gallery Slider plugin for WordPress versions up to and including 1.1.1 Description: The Block Editor Gallery Slider plugin for WordPress is susceptible to unauthorized data modification. A missing capability check within the...