356 matches found
CVE-2026-1730 OS DataHub Maps <= 1.8.3 - Authenticated (Author+) Arbitrary File Upload
The OS DataHub Maps plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'OSDataHubMapsAdmin::addfileandext' function in all versions up to, and including, 1.8.3. This makes it possible for authenticated attackers, with Author-level access and...
WordPress plugin OS DataHub Maps 代码问题漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There wa...
PT-2026-6055
Name of the Vulnerable Software and Affected Versions OS DataHub Maps plugin for WordPress versions through 1.8.3 Description The OS DataHub Maps plugin for WordPress has a flaw allowing arbitrary file uploads. This is due to insufficient file type validation within the OS DataHub Maps Admin::add...
CVE-2023-25562
DataHub is an open-source metadata platform. In versions of DataHub prior to 0.8.45 Session cookies are only cleared on new sign-in events and not on logout events. Any authentication checks using the AuthUtils.hasValidSessionCookie method could be bypassed by using a cookie from a logged out...
CVE-2023-25559
DataHub is an open-source metadata platform. When not using authentication for the metadata service, which is the default configuration, the Metadata service GMS will use the X-DataHub-Actor HTTP header to infer the user the frontend is sending the request on behalf of. When the backends retrieve...
CVE-2023-25560
DataHub is an open-source metadata platform. The AuthServiceClient which is responsible for creation of new accounts, verifying credentials, resetting them or requesting access tokens, crafts multiple JSON strings using format strings with user-controlled data. This means that an attacker may be...
Malicious code in @qwant-internal/datahub-logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71173ddf94db9194dbde8c27f8d6abad60f54b610533b5d69c1a89d2c002d391 The package @qwant-internal/datahub-logger was found to contain malicious code...
MAL-2025-49279 Malicious code in @qwant-internal/datahub-logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71173ddf94db9194dbde8c27f8d6abad60f54b610533b5d69c1a89d2c002d391 The package @qwant-internal/datahub-logger was found to contain malicious code...
EUVD-2025-37285
Malicious code in @qwant-internal/datahub-logger npm...
EUVD-2014-2390
Malware in sbrugna...
EUVD-2011-3463
Malware in sbrugna...
EUVD-2013-0692
Malware in sbrugna...
EUVD-2011-3465
Malware in sbrugna...
EUVD-2012-0346
Malware in sbrugna...
EUVD-2013-0694
Malware in sbrugna...
EUVD-2014-3727
Malware in sbrugna...
EUVD-2012-0345
Malware in sbrugna...
EUVD-2014-2389
Malware in sbrugna...