MAL-2025-44301 Malicious code in free-codes-fortnite-vbucks-2023-djzjd (npm)

The package free-codes-fortnite-vbucks-2023-djzjd was found to contain malicious code...

MAL-2025-44322 Malicious code in free-fortnite-vbucks-codes-march-2023-zdkze (npm)

The package free-fortnite-vbucks-codes-march-2023-zdkze was found to contain malicious code...

MAL-2025-44325 Malicious code in free-robux-codes-2023-dedlzldsz (npm)

The package free-robux-codes-2023-dedlzldsz was found to contain malicious code...

MAL-2025-45900 Malicious code in robux-codes-unlimited-generation-method-fkzkdz (npm)

The package robux-codes-unlimited-generation-method-fkzkdz was found to contain malicious code...

MAL-2025-44389 Malicious code in generator-roblox-robux-unlimited-codes-dkdedz (npm)

The package generator-roblox-robux-unlimited-codes-dkdedz was found to contain malicious code...

MAL-2025-45895 Malicious code in rob-lox-free-codes-rob-ux-2023-ekdlzdz (npm)

The package rob-lox-free-codes-rob-ux-2023-ekdlzdz was found to contain malicious code...

MAL-2025-44323 Malicious code in free-gi-ft-codes-fortnite-2023-dkzkd (npm)

The package free-gi-ft-codes-fortnite-2023-dkzkd was found to contain malicious code...

📄 Concrete CMS 9.4.3 Cross Site Scripting

Concrete CMS version 9.4.3 suffers from a persistent cross site scripting vulnerability. Exploit Title: Concrete CMS version 9.4.3 - Stored XSS Date: 2/09/2025 Exploit Author: Chokri Hammedi Vendor Homepage: https://www.concretecms.org/ Software Link:...

CVE-2025-7955

The RingCentral Communications plugin for WordPress is vulnerable to Authentication Bypass due to improper validation within the ringcentraladminlogin2faverify function in versions 1.5 to 1.6.8. This makes it possible for unauthenticated attackers to log in as any user simply by supplying identic...

CVE-2025-7955

CVE-2025-7955 affects the RingCentral Communications WordPress plugin (versions 1.5–1.6.8). The flaw is in ringcentral_admin_login_2fa_verify() and enables authentication bypass, allowing unauthenticated login as any user with bogus 2FA codes. CVSS 3.1 base score 9.8 (CRITICAL). Remediation: upgr...

CVE-2025-30975

Improper Control of Generation of Code 'Code Injection' vulnerability in SaifuMak Add Custom Codes add-custom-codes allows Code Injection.This issue affects Add Custom Codes: from n/a through = 4.80...

MAL-2025-41352 Malicious code in @mz-codes/const (npm)

The package communicates with a domain associated with malicious activity...

DOM-Based Extension Clickjacking Exposes Popular Password Managers to Credential and Data Theft

Popular password manager plugins for web browsers have been found susceptible to clickjacking security vulnerabilities that could be exploited to steal account credentials, two-factor authentication 2FA codes, and credit card details under certain conditions. The technique has been dubbed Documen...

DOM-Based Extension Clickjacking Exposes Popular Password Managers to Credential and Data Theft

Popular password manager plugins for web browsers have been found susceptible to clickjacking security vulnerabilities that could be exploited to steal account credentials, two-factor authentication 2FA codes, and credit card details under certain conditions. The technique has been dubbed Documen...

CVE-2025-30975

Improper Control of Generation of Code 'Code Injection' vulnerability in SaifuMak Add Custom Codes add-custom-codes allows Code Injection.This issue affects Add Custom Codes: from n/a through = 4.80...

CVE-2025-30975

CVE-2025-30975 affects the WordPress plugin Add Custom Codes (versions up to 4.80). The issue is described as Improper Control of Generation of Code (Code Injection) allowing Remote Code Execution for authenticated users (Contributor+). Documents confirm the vulnerability is still unpatched (Patc...

CVE-2025-30975 WordPress Add Custom Codes <= 4.80 - Arbitrary Code Execution vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in SaifuMak Add Custom Codes add-custom-codes allows Code Injection.This issue affects Add Custom Codes: from n/a through = 4.80...

CVE-2025-30975 WordPress Add Custom Codes <= 4.80 - Arbitrary Code Execution vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in SaifuMak Add Custom Codes add-custom-codes allows Code Injection.This issue affects Add Custom Codes: from n/a through = 4.80...

PT-2025-33908 · Unknown · Saifumak Add Custom Codes

Name of the Vulnerable Software and Affected Versions: SaifuMak Add Custom Codes versions through 4.80 Description: An improper control of generation of code 'Code Injection' issue exists in SaifuMak Add Custom Codes, allowing code injection. Recommendations: At the moment, there is no informatio...

CVE-2025-30975: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in SaifuMak Add Custom Codes add-custom-codes allows Code Injection.This issue affects Add Custom Codes: from n/a through = 4.80...