CVE-2025-22345

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tsinf TS Comfort DB ts-comfort-database allows Reflected XSS.This issue affects TS Comfort DB: from n/a through = 2.0.7...

CVE-2025-22586

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dstoever WPEX Replace DB Urls wpex-replace allows Reflected XSS.This issue affects WPEX Replace DB Urls: from n/a through = 0.4.0...

CVE-2020-2981

Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 18.1.40. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...

CVE-2020-4045

SSB-DB version 20.0.0 has an information disclosure vulnerability. The get method is supposed to only decrypt messages when you explicitly ask it to, but there is a bug where it's decrypting any message that it can. This means that it is returning the decrypted content of private messages, which ...

CVE-2024-51748

Kanboard is project management software that focuses on the Kanban methodology. An authenticated Kanboard admin can run arbitrary php code on the server in combination with a file write possibility. The user interface language is determined and loaded by the setting applicationlanguage in the...

CVE-2024-35678

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BestWebSoft Contact Form to DB by BestWebSoft.This issue affects Contact Form to DB by BestWebSoft: from n/a through 1.7.2...

MAL-2025-1029 Malicious code in bookingcom-db (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3138dcbd6afe5368c587ab12c7909b854e299087ab17fb8efd95dee23c3db44f Any computer that has this package installed or running should be considered...

Malicious code in bookingcom-db (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3138dcbd6afe5368c587ab12c7909b854e299087ab17fb8efd95dee23c3db44f Any computer that has this package installed or running should be considered...

CVE-2025-0374

When etcupdate encounters conflicts while merging files, it saves a version containing conflict markers in /var/db/etcupdate/conflicts. This version does not preserve the mode of the input file, and is world-readable. This applies to files that would normally have restricted visibility, such as...

CVE-2025-0374: Incorrect Permission Assignment for Critical Resource

When etcupdate encounters conflicts while merging files, it saves a version containing conflict markers in /var/db/etcupdate/conflicts. This version does not preserve the mode of the input file, and is world-readable. This applies to files that would normally have restricted visibility, such as...

WordPress plugin Safe Ai Malware Protection for WP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

Malicious code in meli-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10e8951862693cd7f0abc511b5294f748fc5ebafd51d1e36a87114d2583d1221 The OpenSSF Package Analysis project identified 'meli-db' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-552 Malicious code in meli-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10e8951862693cd7f0abc511b5294f748fc5ebafd51d1e36a87114d2583d1221 The OpenSSF Package Analysis project identified 'meli-db' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in lyft-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f37cced5f60e41888f8d0a2a4472279034b4fd9a0f6076ea9337095dc37cea9f The OpenSSF Package Analysis project identified 'lyft-db' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-529 Malicious code in lyft-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f37cced5f60e41888f8d0a2a4472279034b4fd9a0f6076ea9337095dc37cea9f The OpenSSF Package Analysis project identified 'lyft-db' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-463 Malicious code in godaddy-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e568233ece9ccf22e2b6cae72c8d894671a304107b170444f0d43d8692bf31a4 The OpenSSF Package Analysis project identified 'godaddy-db' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-377 Malicious code in amazon-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b2f3fdc024f82b11d080d27e18dfe206e477583ec84c8f2268b9e275c9bb36d7 The OpenSSF Package Analysis project identified 'amazon-db' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Cross-Site Request Forgery (CSRF)

typo3/cms-lowlevel is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to improper handling of deep links in the backend user interface, caused by insufficient enforcement of HTTP methods and reliance on misconfigured security settings and allows an attacker to manipulate...

CVE-2024-55945

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery CSRF. Additionally, state-changing actions in downstrea...

CVE-2024-55945 Cross-Site Request Forgery in DB Check Module in TYPO3

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery CSRF. Additionally, state-changing actions in downstrea...