5307 matches found
EUVD-2023-38508
Malicious code in bioql PyPI...
EUVD-2025-20754
Malicious code in bioql PyPI...
EUVD-2023-55506
Malicious code in bioql PyPI...
Mattermost Server 9.11.x < 9.11.18 / 10.5.x < 10.5.9 / 10.11.0 Authorization Bypass (MMSA-2025-00502)
The version of Mattermost Server installed on the remote host is affected by a vulnerability as referenced in the MMSA-2025-00502 advisory. - Mattermost versions 10.5.x = 10.5.9 and 9.11.x = 9.11.17 fail to properly validate access controls which allows any authenticated user to download sensitiv...
CVE-2025-60162
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Job Board Manager job-board-manager allows DOM-Based XSS.This issue affects Job Board Manager: from n/a through = 2.1.61...
WordPress Job Board Manager Plugin <= 2.1.61 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Job Board Manager versions = 2.1.61...
CVE-2025-60162
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Job Board Manager job-board-manager allows DOM-Based XSS.This issue affects Job Board Manager: from n/a through = 2.1.61...
CVE-2025-60162 WordPress Job Board Manager Plugin <= 2.1.61 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Job Board Manager job-board-manager allows DOM-Based XSS.This issue affects Job Board Manager: from n/a through = 2.1.61...
CVE-2025-60162 WordPress Job Board Manager Plugin <= 2.1.61 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Job Board Manager job-board-manager allows DOM-Based XSS.This issue affects Job Board Manager: from n/a through = 2.1.61...
CVE-2025-60162
CVE-2025-60162 affects WordPress Plugin Job Board Manager (versions affected up to 2.1.61). It is a DOM-based XSS caused by improper input neutralization during web page generation. CVSSv3.1 base score 6.5 (Network attack, Low/Low/Low impact: Confidentiality, Integrity, Availability). Exploitatio...
PT-2025-39604
Name of the Vulnerable Software and Affected Versions PickPlugins Job Board Manager versions through 2.1.61 Description A flaw exists in PickPlugins Job Board Manager that allows for DOM-Based Cross-Site Scripting XSS. This issue is due to improper neutralization of input during web page...
WordPress plugin Job Board Manager 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
Defy Security Appoints Esteemed Cybersecurity Leader Gary Warzala to Its Board of Directors
Pittsburg, United States, 23rd September 2025, CyberNewsWire...
CVE-2025-9081
Mattermost versions 10.5.x = 10.5.8, 9.11.x = 9.11.17 fail to properly validate access controls which allows any authenticated user to download sensitive files via board file download endpoint using UUID enumeration...
CVE-2025-9081
Mattermost versions 10.5.x = 10.5.8, 9.11.x = 9.11.17 fail to properly validate access controls which allows any authenticated user to download sensitive files via board file download endpoint using UUID enumeration...
CVE-2025-9081 IDOR in board file download allows any user to download any file by UUID
Mattermost versions 10.5.x = 10.5.8, 9.11.x = 9.11.17 fail to properly validate access controls which allows any authenticated user to download sensitive files via board file download endpoint using UUID enumeration...
CVE-2025-9081 IDOR in board file download allows any user to download any file by UUID
Mattermost versions 10.5.x = 10.5.8, 9.11.x = 9.11.17 fail to properly validate access controls which allows any authenticated user to download sensitive files via board file download endpoint using UUID enumeration...
CVE-2025-9081 IDOR in board file download allows any user to download any file by UUID
Mattermost versions 10.5.x = 10.5.8, 9.11.x = 9.11.17 fail to properly validate access controls which allows any authenticated user to download sensitive files via board file download endpoint using UUID enumeration...
CVE-2025-9081
CVE-2025-9081 affects Mattermost 9.11.x <= 9.11.17 and 10.5.x
PT-2025-38620
Name of the Vulnerable Software and Affected Versions Mattermost versions 10.5.x through 10.5.8 Mattermost versions 9.11.x through 9.11.17 Description Mattermost fails to properly validate access controls, allowing any authenticated user to download sensitive files. This is possible through the...