108712 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-39202
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. In affected versions the widgets edito...
WordPress Advanced Custom Fields Pro Plugin < 6.4.3 HTML Injection Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:advancedcustomfields:advancedcustomfieldspro"; if descriptio...
Exploit for CVE-2025-32778
CVE-2025-32778 - Web-Check Command Injection Exploit !Criti...
WordPress Custom Menu plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by muhammad yudha Patchstack Alliance in WordPress Plugin Custom Menu versions = 1.8...
WordPress Custom Comment plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Nabil Irawan Patchstack Alliance in WordPress Plugin Custom Comment versions = 2.1.6...
CVE-2025-28975
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in redqteam Alike - WordPress Custom Post Comparison alike allows Reflected XSS.This issue affects Alike - WordPress Custom Post Comparison: from n/a through = 3.0.1...
CVE-2025-8943
The Custom MCPs feature is designed to execute OS commands, for instance, using tools like npx to spin up local MCP Servers. However, Flowise's inherent authentication and authorization model is minimal and lacks role-based access controls RBAC. Furthermore, in Flowise versions before 3.0.1 the...
WordPress WPExperts Post SMTP plugin authentication bypass vulnerability
WordPress WPExperts Post SMTP plugin is a plugin for optimizing the WordPress email sending process. The main features include custom email services, email logging, DNS authentication and OAuth authorization. An authentication bypass vulnerability exists in the WordPress WPExperts Post SMTP plugi...
WordPress Advanced Custom Fields Plugin HTML Injection Vulnerability
WordPress Advanced Custom Fields Plugin is a powerful custom fields plugin for WordPress that allows you to add many types of custom fields such as images, checkboxes, files, text, etc. to posts, pages, categories, users, and other objects, and supports exporting to XML or PHP code, and can be...
Linux Distros Unpatched Vulnerability : CVE-2021-46966
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ACPI: custommethod: fix potential use-after-free issue In cmwrite, buf is always freed when...
CVE-2025-43734
A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.10, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.16 and 7.4 GA through update 92 allows...
Malicious code in custom-mysql2 (npm)
The package custom-mysql2 was found to contain malicious code...
Malicious code in eslint-plugin-automation-custom (npm)
The package eslint-plugin-automation-custom was found to contain malicious code...
Malicious code in custom-get-org-chart (npm)
The package custom-get-org-chart was found to contain malicious code...
Malicious code in angular-4-datatable-custom (npm)
The package angular-4-datatable-custom was found to contain malicious code...
MAL-2025-17836 Malicious code in custom-redis (npm)
The package custom-redis was found to contain malicious code...
MAL-2025-21707 Malicious code in google-jsdocless (npm)
The package google-jsdocless was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security f373d78893327920491950970d76c5deb36859c2cbd890bbc815d16536840004 This package installs a dependency hosted on a custom domain that runs a...
MAL-2025-14184 Malicious code in airbnb-angular (npm)
The package airbnb-angular was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 7fff1f5000c3707b881be6257856ad35d4e8c37a27f0219b0e380ee46fcae5ea This package installs a dependency hosted on a custom domain that runs an...