334 matches found
CZ Loan Management <= 1.1 - SQL Injection
The CZ Loan Management WordPress plugin through 1.1 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection. id: CVE-2024-5975 info: name: CZ Loan Management = 1.1 - SQL Injection author...
CVE-2026-66491
Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the getSource function lead to an arbitrary file read vulnerability...
CVE-2026-66493
CVE-2026-66493 affects the Joomla extension Phoca Commander (phoca.cz) versions 1.0.0 through 6.1.3. The issue is a path traversal vulnerability caused by improper limitation of paths for delete, copy, and move actions. The CVSS data indicates NETWORK access with low complexity and high privilege...
CVE-2026-42748
Unrestricted Upload of File with Dangerous Type vulnerability in WPify WPify Woo Czech wpify-woo allows Upload a Web Shell to a Web Server.This issue affects WPify Woo Czech: from n/a through = 5.4.1...
CVE-2026-49943
CZ.NIC BIRD Internet Routing Daemon through 2.19.0 contains a stack-based buffer overflow in the BGP ASPATH mask matching implementation in nest/a-path.c. The aspathmatch function uses a fixed-size stack array of 2048 + 1 pmpos entries, while parsepath expands ASPATH segments from a received BGP...
EUVD-2025-178708
Malicious code in glaciology-wormhole-cz-conventional-changelog-oauth npm...
EUVD-2025-179427
Malicious code in cz-conventional-changelog-ora-rehype-xanadu npm...
EUVD-2025-179424
Malicious code in cz-conventional-changelog-stop-readable-mutation npm...
EUVD-2025-179429
Malicious code in cz-conventional-changelog-blitz-steganography-lacerta npm...
EUVD-2025-178548
Malicious code in hercules-css-minimizer-webpack-plugin-cz-conventional-changelog-dorado npm...
EUVD-2025-177811
Malicious code in miranda-fomalhaut-apollo-cz-conventional-changelog npm...
EUVD-2025-179339
Malicious code in deneb-bellatrix-eridanus-cz-conventional-changelog npm...
EUVD-2025-177959
Malicious code in markdown-cz-conventional-changelog-link-proxima npm...
Malicious code in cz-conventional-changelog-stop-readable-mutation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409af1f40cee40b2159b3a8d5e2b0d4416b25c8e18bff01a890829e0bb75d7af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111190
Malicious code in meteor-procyon-cz-conventional-changelog-less npm...
EUVD-2025-114690
Malicious code in cz-conventional-changelog-express-concurrently-juno npm...
EUVD-2025-114684
Malicious code in cz-conventional-changelog-nashira-blitz-terser npm...
EUVD-2025-121087
Malicious code in typeorm-cressida-cz-conventional-changelog-markdown-pdf npm...