Linux Distros Unpatched Vulnerability : CVE-2022-31091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Guzzle, an extensible PHP HTTP client. Authorization and Cookie headers on requests are sensitive information. In affected versions on making a request which...

Linux Distros Unpatched Vulnerability : CVE-2022-29248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Guzzle is a PHP HTTP client. Guzzle prior to versions 6.5.6 and 7.4.3 contains a vulnerability with the cookie middleware. The vulnerability is that it is not...

Linux Distros Unpatched Vulnerability : CVE-2024-36002

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dpll: fix dpllpinonpinregister for multiple parent pins In scenario where pin is registered...

Linux Distros Unpatched Vulnerability : CVE-2022-25276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Media oEmbed iframe route does not properly validate the iframe domain setting, which allows embeds to be displayed in the context of the primary domain...

Malicious code in cookie-loggers (npm)

The package cookie-loggers was found to contain malicious code...

Malicious code in crypto-cookie-factory (npm)

The package crypto-cookie-factory was found to contain malicious code...

Malicious code in @berush/referral-cookie-handler (npm)

The package @berush/referral-cookie-handler was found to contain malicious code...

Malicious code in cookie-police (npm)

The package cookie-police was found to contain malicious code...

MAL-2025-7117 Malicious code in @berush/referral-cookie-handler (npm)

The package @berush/referral-cookie-handler was found to contain malicious code...

MAL-2025-17534 Malicious code in cookie-loggers (npm)

The package cookie-loggers was found to contain malicious code...

MAL-2025-17733 Malicious code in crypto-cookie-factory (npm)

The package crypto-cookie-factory was found to contain malicious code...

MAL-2025-17535 Malicious code in cookie-police (npm)

The package cookie-police was found to contain malicious code...

CVE-2025-54683

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Astoundify WP Modal Popup with Cookie Integration wp-modal-popup-with-cookie-integration allows Reflected XSS.This issue affects WP Modal Popup with Cookie Integration: from n/a through = 2.4...

CVE-2025-54683 WordPress WP Modal Popup with Cookie Integration Plugin plugin <= 2.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Astoundify WP Modal Popup with Cookie Integration wp-modal-popup-with-cookie-integration allows Reflected XSS.This issue affects WP Modal Popup with Cookie Integration: from n/a through = 2.4...

CVE-2025-54683

CVE-2025-54683 is a WordPress plugin vulnerability in the Astoundify WP Modal Popup with Cookie Integration (≤ 2.4) that enables a reflected Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. Affected product/version: WP Modal Popup with Cookie Integration...

CVE-2025-54683 WordPress WP Modal Popup with Cookie Integration Plugin plugin <= 2.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Astoundify WP Modal Popup with Cookie Integration allows Reflected XSS. This issue affects WP Modal Popup with Cookie Integration: from n/a through 2.4...

PT-2025-33235 · WordPress · Astoundify Wp Modal Popup With Cookie Integration

Name of the Vulnerable Software and Affected Versions: Astoundify WP Modal Popup with Cookie Integration versions through 2.4 Description: The software contains an improper neutralization of input during web page generation, leading to a reflected cross-site scripting XSS issue. Recommendations:...

WordPress plugin WP Modal Popup with Cookie Integration 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

CVE-2011-10018

myBB version 1.6.4 was distributed with an unauthorized backdoor embedded in the source code. The backdoor allowed remote attackers to execute arbitrary PHP code by injecting payloads into a specially crafted collapsed cookie. This vulnerability was introduced during packaging and was not part of...

CVE-2011-10018

CVE-2011-10018 affects myBB 1.6.4, where an unauthorized backdoor was embedded in the source during packaging, enabling remote PHP code execution via a crafted collapsed cookie with no authentication. Exploitation leads to full compromise of the web server under the web app’s context. No fix vers...