EUVD-2025-84325

Mitigation bypass in the DOM: Security component. This vulnerability affects Firefox 145 and Firefox ESR 140.5...

UBUNTU-CVE-2025-13013

Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5...

CVE-2025-13018 Mitigation bypass in the DOM: Security component

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

CVE-2025-13013

Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5...

EUVD-2025-88799

Malicious code in sinta-rojak93-miaww npm...

EUVD-2025-91014

Malicious code in irma-lumpur24-miaww npm...

EUVD-2025-90930

Malicious code in jaja-enting60-miaww npm...

CGA-R274-H522-38P3

Bulletin has no description...

XPath Injection

smolagents is vulnerable to XPath injection. The vulnerability is due to insecure XPath construction due to searchitemctrlf concatenating unsanitized user input into XPath expressions, allowing attackers to inject XPath to bypass filters, access unintended DOM nodes, or disrupt web automation...

EUVD-2025-74226

Malicious code in softcicadaharlequin-99 npm...

EUVD-2025-75505

Malicious code in superaardwolf-appteadev npm...

EUVD-2025-77532

Malicious code in radicalmockingbirdorange-71 npm...

EUVD-2025-77540

Malicious code in progressivelungfishturquoise-24 npm...

EUVD-2025-71130

Malicious code in cici-martabak37-ruro npm...

EUVD-2025-70435

Malicious code in fauzi-nasi81-ruro npm...

EUVD-2025-83244

Malicious code in yuni-kue56-ruro npm...

EUVD-2025-60957

The Document Pro Elementor – Documentation & Knowledge Base plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.9. This is due to the plugin exposing sensitive Algolia API keys through the frontend JavaScript code via wplocalizescript without prope...

EUVD-2025-72238

Malicious code in lina-kemplang23-tititugel npm...

EUVD-2025-86120

Malicious code in fajar-gaplek96-miaww npm...

CVE-2025-11997 Document Pro Elementor – Documentation & Knowledge Base <= 1.0.9 - Unauthenticated Information Exposure

The Document Pro Elementor – Documentation & Knowledge Base plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.9. This is due to the plugin exposing sensitive Algolia API keys through the frontend JavaScript code via wplocalizescript without prope...