PT-2025-47693

The Checkbox plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'wp ajax nopriv checkbox clean log' AJAX endpoint in all versions up to, and including, 2.8.10. This makes it possible for unauthenticated attackers to clear log files...

WordPress plugin Checkbox has a security vulnerability

WordPress Checkbox plugin are functional plugins designed to add or enhance checkbox functionality to a website. WordPress Checkbox plugin suffers from an unauthorized data loss vulnerability that stems from a lack of permission checking, which can be exploited by an attacker to cause unauthorize...

datasette-acl (0.4.0a5), datasette-alerts (0.0.1a5) +23 more potentially affected by CVE-2025-64481 via datasette (>=1.0.0a7, <=1.0.0a19)

datasette PYPI version =1.0.0a7, =0.0.1a1, =0.1.0a3, =0.1.0a5 and more Source cves: CVE-2025-64481 Source advisory: SNYK:PYTHON-DATASETTE-13849308...

EUVD-2018-9452

Malware in sbrugna...

EUVD-2019-6477

Malware in sbrugna...

EUVD-2021-1840

Malware in sbrugna...

EUVD-2022-0868

Malicious code in bioql PyPI...

Malware in @nstudio/nativescript-checkbox

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @nstudio/nativescript-checkbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ac10be560243885c47e80e47d545e8006f285d8fe9f5756c7b92f9cd2085639 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47164 Malicious code in @nstudio/nativescript-checkbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ac10be560243885c47e80e47d545e8006f285d8fe9f5756c7b92f9cd2085639 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

MAL-2025-9298 Malicious code in @sellerly-kit/checkbox (npm)

The package @sellerly-kit/checkbox was found to contain malicious code...

Malicious code in @sellerly-kit/checkbox (npm)

The package @sellerly-kit/checkbox was found to contain malicious code...

CVE-2024-3210

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'reg-single-checkbox' shortcode in all versions up to, and including, 4.15.5 due to...

CVE-2022-29533

An issue was discovered in MISP before 2.4.158. There is XSS in app/Controller/OrganisationsController.php in a situation with a "weird single checkbox page."...

CVE-2019-15476

Former before 4.2.1 has XSS via a checkbox value...

Malicious code in @sporta-technology/d11-web-components.checkbox (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-49576

A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBFWidget object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An...

November 7, 2023, update for Project 2016 (KB5002502)

November 7, 2023, update for Project 2016 KB5002502 Applies To Project Professional 2016 Project Standard 2016 This article describes update 5002502 for Microsoft Project 2016 that was released on November 7, 2023. Be aware that the update in the Microsoft Download Center applies to the Microsoft...

Foxit Reader memory corruption vulnerability (CNVD-2025-0095609)

Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. A security vulnerability exists in Foxit Reader version 2024.3.0.26795, which originates from a post-release reuse vulnerability contained in the checkbox CBFWidget object. An attacker can exploit this vulnerability to cause...