1614 matches found
CVE-2025-66303 Grav is vulnerable to a DOS on the admin panel
Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A Denial of Service DoS vulnerability has been identified in Grav related to the handling of scheduledat parameters. Specifically, the application fails to properly sanitize input for cron expressions. By manipulating the scheduledat...
CVE-2025-66303 Grav is vulnerable to a DOS on the admin panel
Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A Denial of Service DoS vulnerability has been identified in Grav related to the handling of scheduledat parameters. Specifically, the application fails to properly sanitize input for cron expressions. By manipulating the scheduledat...
PT-2025-48562
Name of the Vulnerable Software and Affected Versions Grav versions prior to 1.8.0-beta.27 Description Grav is susceptible to a Denial of Service DoS condition due to improper input sanitization of the scheduled at parameter when processing cron expressions. Manipulating this parameter with...
📄 FreePBX 17.0.3 SQL Injection
FreePBX version 17.0.3 proof of concept unauthenticated remote SQL injection exploit that leverages ajax.php. ============================================================================================================================================= | Title : FreePBX 17.0.3 Unauthenticated SQL...
PT-2025-47426
The Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin for WordPress is vulnerable to Authorization in versions up to, and including, 5.9.10. This is due to the plugin not properly verifying that a user is authorized to perform an action in the trigger mailing queue...
EUVD-2025-175664
Malicious code in warn-class-proxy-cron-earth npm...
EUVD-2025-178092
Malicious code in link-cron-simulate-assert-log npm...
EUVD-2025-179685
Malicious code in cold-cron-object-chi-export npm...
EUVD-2025-180080
Malicious code in big-grid-cron-parse-fork npm...
EUVD-2025-179507
Malicious code in cron-rho-analyze-socket-air npm...
Malicious code in pi-quick-cron-book-compile (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf44e489d6db17c47113c34f0e8b7584c52a1b98fc559ea0dbd9fb498ae230f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178444
Malicious code in import-proxy-cron-balance-abstract npm...
EUVD-2025-179509
Malicious code in cron-kappa-bash-serialize-beta npm...
EUVD-2025-179506
Malicious code in cron-tree-query-unix-report npm...
EUVD-2025-175895
Malicious code in transpile-pi-cron-secure-double npm...
EUVD-2025-177477
Malicious code in old-export-class-cron-deploy npm...
EUVD-2025-179206
Malicious code in easy-throw-cron-rho-sanitize npm...
EUVD-2025-178038
Malicious code in log-cron-execute-small-signal npm...