EUVD-2025-205983

Cross-Site Request Forgery CSRF vulnerability in emendoseb Co-marquage service-public.Fr allows Cross Site Request Forgery.This issue affects Co-marquage service-public.Fr: from n/a through 0.5.77...

CVE-2025-62113

Technical details for CVE-2025-62113 are not provided in the supplied documents; no product versions, exploit information, vectors, or remediation details are disclosed here. Monitor for updates.

CVE-2025-62113 WordPress Co-marquage service-public.fr plugin <= 0.5.77 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in emendoseb Co-marquage service-public.Fr allows Cross Site Request Forgery.This issue affects Co-marquage service-public.Fr: from n/a through 0.5.77...

WordPress Co-marquage service-public.fr plugin <= 0.5.77 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Co-marquage service-public.fr versions = 0.5.77...

CVE-2025-62113: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in emendoseb Co-marquage service-public.fr co-marquage-service-public allows Cross Site Request Forgery.This issue affects Co-marquage service-public.fr: from n/a through = 0.5.77...

PT-2025-54394

Cross-Site Request Forgery CSRF vulnerability in emendo seb Co-marquage service-public.Fr allows Cross Site Request Forgery.This issue affects Co-marquage service-public.Fr: from n/a through 0.5.77...

WordPress plugin Co-marquage service-public.Fr 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

EUVD-2025-202009

Insertion of Sensitive Information Into Sent Data vulnerability in WP Messiah WP AI CoPilot ai-co-pilot-for-wp allows Retrieve Embedded Sensitive Data.This issue affects WP AI CoPilot: from n/a through = 1.2.7...

CVE-2025-62994: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in WP Messiah WP AI CoPilot ai-co-pilot-for-wp allows Retrieve Embedded Sensitive Data.This issue affects WP AI CoPilot: from n/a through = 1.2.7...

EUVD-2025-201383

The CoSign Single Signon plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $SERVER'PHPSELF' parameter in all versions up to, and including, 0.3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2025-11772 Co-Installer Privilege Escalation

A carefully crafted DLL, copied to C:\ProgramData\Synaptics folder, allows a local user to execute arbitrary code with elevated privileges during driver installation...

CVE-2025-11772

CVE-2025-11772 affects the Synaptics Fingerprint Driver; a specially crafted DLL copied into C:\ProgramData\Synaptics (co-installer context) allows a local user to execute arbitrary code with elevated privileges during driver installation. This Red Hat and EUVD entries confirm the same行为. The roo...

CVE-2018-25126: Use of Hard-coded Credentials

Shenzhen TVT Digital Technology Co., Ltd. NVMS-9000 firmware used by many white-labeled DVR/NVR/IPC products contains hardcoded API credentials and an OS command injection flaw in its configuration services. The web/API interface accepts HTTP/XML requests authenticated with a fixed vendor...

CVE-2025-0643: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage allows Stored XSS. This issue affects Pyxis Signage: through 31012025...

@omni-co/vega-lite (>=6.2.0-fork.2, <=6.2.0-fork.2-beta.2), arakawa (0.1.0-alpha.1) +3 more potentially affected by CVE-2025-59840 via vega-expression (6.0.0)

vega-expression NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on vega-expression and may be impacted: - @omni-co/vega-lite =6.2.0-fork.2, =6.0.0, =6.0.0, =6.0.0, =6.3.1 Source cves: CVE-2025-59840 Source advisory: MEND:CVE-2025-59840...

Siemens SIMATIC S7-1500 Observable Discrepancy (CVE-2018-0495)

Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the gcryeccecdsasign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. T...

Malicious code in imodiov-kufni-co (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f4b68274db53f56380fde73727526099d526f767f02cff775409e6f3a78964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137112

Malicious code in imodiov-kufni-co npm...

MAL-2025-160216 Malicious code in matane-co-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d6a9164fe6db67415759f5837d923911cd8cf5aafbece186d06511d9fafe0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-60239

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Codexpert, Inc CoSchool LMS coschool allows Blind SQL Injection.This issue affects CoSchool LMS: from n/a through = 1.4.3...