Exploit for CVE-2024-25600

MODIFIED CVE-2024-25600 original - https://github.com/K3ysT...

WordPress Bold Page Builder plugin <= 5.5.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Poystick in WordPress Plugin Bold Page Builder versions = 5.5.2...

[SECURITY] Fedora 41 Update: docker-buildkit-0.26.1-1.fc41

Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit...

[SECURITY] Fedora 42 Update: docker-buildkit-0.26.1-1.fc42

Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit...

WordPress Ace Post Type Builder plugin unauthorized custom taxonomy removal vulnerability

WordPress Ace Post Type Builder plugin is a plugin for creating and managing Custom Post Types CustomPostTypes,CPT, which helps users to extend the content structure in WordPress with support for advanced features such as custom fields, categories and tags. WordPress Ace Post Type Builder plugin...

Owasp Json-sanitizer 安全漏洞

Owasp Json-sanitizer is a Java-based code library from the OWASP Foundation that generates Json format data from Json like text content. A security vulnerability exists in Owasp Json-sanitizer version 20240325.1, which stems from HtmlPolicyBuilder allowing noscript and style tags, which could lea...

GHSA-G9GQ-3PFX-2GW2 OWASP Java HTML Sanitizer is vulnerable to XSS via noscript tag and improper style tag sanitization

Summary It is observed that OWASP java html sanitizer is vulnerable to XSS if HtmlPolicyBuilder allows noscript and style tags with allowTextIn inside the style tag. This could lead to XSS if the payload is crafted in such a way that it does not sanitise the CSS and allows tags which is not...

OWASP Java HTML Sanitizer is vulnerable to XSS via noscript tag and improper style tag sanitization

Summary It is observed that OWASP java html sanitizer is vulnerable to XSS if HtmlPolicyBuilder allows noscript and style tags with allowTextIn inside the style tag. This could lead to XSS if the payload is crafted in such a way that it does not sanitise the CSS and allows tags which is not...

WordPress Elementor Website Builder plugin <= 3.33.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Bonds in WordPress Plugin Elementor Website Builder versions = 3.33.0...

CVE-2025-13405

CVE-2025-13405 affects the WordPress plugin “Ace Post Type Builder” (versions up to and including 1.9). The vulnerability is caused by missing authorization validation in the cptb_delete_custom_taxonomy() function, enabling authenticated attackers with Subscriber-level access or higher to delete ...

CVE-2025-13405 Ace Post Type Builder <= 1.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Custom Taxonomy Deletion via 'taxonomy' Parameter

The Ace Post Type Builder plugin for WordPress is vulnerable to unauthorized custom taxonomy deletion due to missing authorization validation on the cptbdeletecustomtaxonomy function in all versions up to, and including, 1.9. This makes it possible for authenticated attackers, with Subscriber-lev...

CVE-2025-13405 Ace Post Type Builder <= 1.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Custom Taxonomy Deletion via 'taxonomy' Parameter

The Ace Post Type Builder plugin for WordPress is vulnerable to unauthorized custom taxonomy deletion due to missing authorization validation on the cptbdeletecustomtaxonomy function in all versions up to, and including, 1.9. This makes it possible for authenticated attackers, with Subscriber-lev...

WordPress plugin Ace Post Type Builder 安全漏洞

WordPress Ace Post Type Builder plugin is a plugin for creating and managing Custom Post Types CustomPostTypes,CPT, which helps users to extend the content structure in WordPress with support for advanced features such as custom fields, categories and tags. WordPress Ace Post Type Builder plugin...

WordPress Bold Page Builder plugin cross-site scripting vulnerability

WordPress Bold Page Builder plugin is a WordPress page builder plugin that supports drag and drop editing and real-time front and back end previews for quickly creating responsive web page layouts. WordPress Bold Page Builder plugin suffers from a cross-site scripting vulnerability that stems fro...

WordPress Ace Post Type Builder plugin <= 1.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Custom Taxonomy Deletion via 'taxonomy' Parameter vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Custom Taxonomy Deletion via 'taxonomy' Parameter vulnerability discovered by Legion Hunter in WordPress Plugin Ace Post Type Builder versions = 1.9...

Malicious code in @silgi/module-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8dcdf459dd6f30b49693265bec20c40b3a8f9b49a11f1eef906e86ecc5741ad The package @silgi/module-builder was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199289

Malicious code in @silgi/module-builder npm...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

EUVD-2025-198845

Malicious code in axios-builder npm...

MAL-2025-190832 Malicious code in axios-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c726ee1f437e2d41e6315304248feeb9214b2418b2a9662d27e0adec579c454 The package axios-builder was found to contain malicious code. Source: ghsa-malware f8ff42a488c5cabfb90c3ab47735ddb22959b3dfe23243360ac54c4db3da54af...