2239 matches found
WordPress plugin Simple User Capabilities has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
CVE-2025-12158: Missing Authorization
The Simple User Capabilities plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the sucsubmitcapabilities function in all versions up to, and including, 1.0. This makes it possible for unauthenticated attackers to elevate the role of any user account t...
CVE-2025-9544
The Doppler Forms WordPress plugin (versions through 2.5.1 ) is vulnerable to unauthorized plugin installation due to an insecure AJAX action named install_extension. The root cause is a failure to verify user capabilities or utilize a nonce , allowing any authenticated user—including those with ...
WordPress plugin Doppler Forms has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
SUSE-SU-2025:20888-1 Security update for kernel-livepatch-MICRO-6-0_Update_9
This update for kernel-livepatch-MICRO-6-0Update9 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayedfree bsc1246075 - CVE-2025-38396: fs: export anoninodemakesecureinode and fix secretmem LSM bypass bsc1247158 - CVE-2025-38471: kernel: tls: always refresh the queue wh...
Security update for kernel-livepatch-MICRO-6-0-RT_Update_6
This update for kernel-livepatch-MICRO-6-0-RTUpdate6 fixes the following issues: CVE-2025-38206: exfat: fix double free in delayedfree bsc1246075 CVE-2025-38396: fs: export anoninodemakesecureinode and fix secretmem LSM bypass bsc1247158 CVE-2025-38471: kernel: tls: always refresh the queue when...
Fast, Broad, and Elusive: How Vidar Stealer 2.0 Upgrades Infostealer Capabilities
Trend Research examines the latest version of the Vidar stealer, which features a full rewrite in C, a multithreaded architecture, and several enhancements that warrant attention. Its timely evolution suggests that Vidar is positioning itself to occupy the space left after Lumma Stealer’s decline...
tf.keras.layers.Embedding TensorFlow
The vulnerability of the tf.keras.layers.Embedding layer in the TensorFlow machine learning system is related to the presence of undeclared capabilities during the processing of the inputdim argument. Exploiting this vulnerability could allow attackers to compromise the integrity and accessibilit...
DuckDB node-api node-bindings duckdb-wasm Unauthorized Access
The vulnerability of the node-api, node-bindings, and duckdb-wasm packages in the DuckDB database management system is related to the presence of undeclared capabilities. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...
EUVD-2000-0384
Malware in sbrugna...
EUVD-2018-17508
Malware in sbrugna...
EUVD-2021-19578
Malware in sbrugna...
EUVD-2018-1897
Malware in sbrugna...
EUVD-2018-3656
Malware in sbrugna...
EUVD-2000-0503
Malware in sbrugna...
EUVD-2002-0977
Malware in sbrugna...
EUVD-2021-18611
Malware in sbrugna...
EUVD-2020-24896
Malware in sbrugna...