Malicious code in mitailok-don-olia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b49d2d4ec53d95b26d764997a3dfb84b07b5153d85411761052d60cb0572281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-3332

Malicious code in bioql PyPI...

EUVD-2022-49932

Malicious code in bioql PyPI...

EUVD-2022-48274

Malicious code in bioql PyPI...

CVE-2022-47157

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Don Benjamin WP Custom Fields Search plugin = 1.2.34 versions...

CVE-2022-45364

Cross-Site Request Forgery CSRF vulnerability in Glen Don L. Mongaya Drag and Drop Multiple File Upload – Contact Form 7 plugin = 1.3.6.5 versions...

CVE-2022-45377

Unrestricted Upload of File with Dangerous Type vulnerability in Glen Don L. Mongaya Drag and Drop Multiple File Upload for WooCommerce.This issue affects Drag and Drop Multiple File Upload for WooCommerce: from n/a through 1.0.8...

Malicious code in simulateur-de-don (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85261d939101bd6262ac504db7d7c42ee93a444ba9a1ae423a8ba1eab7d56bca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1498 Malicious code in simulateur-de-don (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85261d939101bd6262ac504db7d7c42ee93a444ba9a1ae423a8ba1eab7d56bca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-23673

CVE-2025-23673: CSRF in Email on Publish (WordPress plugin) can trigger Stored XSS in versions from n/a through 1.5. Root cause is CSRF enabling XSS payload execution; CVSS 3.1 base 7.1. No additional remediation details provided in the documents.

don-gun.ru Cross Site Scripting vulnerability OBB-3905576

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-45377

Unrestricted Upload of File with Dangerous Type vulnerability in Glen Don L. Mongaya Drag and Drop Multiple File Upload for WooCommerce.This issue affects Drag and Drop Multiple File Upload for WooCommerce: from n/a through 1.0.8...

CVE-2022-45377

CVE-2022-45377 affects the WordPress plugin Drag and Drop Multiple File Upload for WooCommerce (versions

U.S. Hacks QakBot, Quietly Removes Botnet Infections

The U.S. government today announced a coordinated crackdown against QakBot, a complex malware family used by multiple cybercrime groups to lay the groundwork for ransomware infections. The international law enforcement operation involved seizing control over the botnets online infrastructure, and...

CVE-2022-45364

Cross-Site Request Forgery CSRF vulnerability in Glen Don L. Mongaya Drag and Drop Multiple File Upload – Contact Form 7 plugin = 1.3.6.5 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Glen Don L. Mongaya Drag and Drop Multiple File Upload – Contact Form 7 plugin = 1.3.6.5 versions...

CVE-2022-45364

CVE-2022-45364 is a CSRF vulnerability in the WordPress plugin Glen Don L. Mongaya Drag and Drop Multiple File Upload – Contact Form 7, affected versions

CVE-2022-47157

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Don Benjamin WP Custom Fields Search plugin = 1.2.34 versions...

CVE-2022-47157

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Don Benjamin WP Custom Fields Search plugin = 1.2.34 versions...

CVE-2022-47157 WordPress WP Custom Fields Search Plugin <= 1.2.34 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Don Benjamin WP Custom Fields Search plugin = 1.2.34 versions...