2646 matches found
EUVD-2024-47297
Malicious code in bioql PyPI...
EUVD-2025-23677
Malicious code in bioql PyPI...
EUVD-2024-2475
Malicious code in bioql PyPI...
EUVD-2025-28631
Malicious code in bioql PyPI...
CVE-2025-57902
Cross-Site Request Forgery CSRF vulnerability in Md Taufiqur Rahman RIS Version Switcher - Downgrade or Upgrade WP Versions Easily ris-version-switcher allows Cross Site Request Forgery.This issue affects RIS Version Switcher - Downgrade or Upgrade WP Versions Easily: from n/a through = 1.0...
CVE-2025-57902 WordPress RIS Version Switcher – Downgrade or Upgrade WP Versions Easily Plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in Md Taufiqur Rahman RIS Version Switcher Downgrade or Upgrade WP Versions Easily ris-version-switcher allows Cross Site Request Forgery.This issue affects RIS Version Switcher Downgrade or Upgrade WP Versions Easily: from n/a through = 1.0...
CVE-2025-57902
CVE-2025-57902 is a CSRF vulnerability in the RIS Version Switcher – Downgrade or Upgrade WP Versions Easily WordPress plugin (RIS Version Switcher). Affected versions are from n/a through 1.0. The provided Connected documents do not include concrete exploit details, impact specifics beyond CSRF ...
PT-2025-39012
Name of the Vulnerable Software and Affected Versions RIS Version Switcher versions through 1.0 Description A Cross-Site Request Forgery CSRF issue exists in RIS Version Switcher – Downgrade or Upgrade WP Versions Easily. This allows attackers to perform actions on behalf of an authenticated user...
WordPress plugin PressPage Entertainment Inc Mavis HTTPS to HTTP Redirection 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL based...
CVE-2025-59270
psPAS PowerShell module does not explicitly enforce TLS 1.2 within the 'Get-PASSAMLResponse' function during the SAML authentication process. An unauthenticated attacker in a 'Man-in-the-Middle' position could manipulate the TLS handshake and downgrade TLS to a deprecated protocol. Fixed in 7.0.2...
Request Smuggling
h2 is vulnerable to request smuggling. The vulnerability is due to improper validation of header names/values when downgrading HTTP/2 requests to HTTP/1.1, which allows an attacker to inject CRLF characters, manipulate request boundaries, and bypass security controls...
Linux Distros Unpatched Vulnerability : CVE-2022-50338
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - binder: fix UAF of alloc-vma in race with munmap In commit 720c24192404 ANDROID: binder: change downwrite to downread binder assumed the mmap read lock is...
CVE-2025-59270 psPAS does not enforce TLS 1.2 within Get-PASSAMLResponse
psPAS PowerShell module does not explicitly enforce TLS 1.2 within the 'Get-PASSAMLResponse' function during the SAML authentication process. An unauthenticated attacker in a 'Man-in-the-Middle' position could manipulate the TLS handshake and downgrade TLS to a deprecated protocol. Fixed in 7.0.2...
PT-2025-37997
Name of the Vulnerable Software and Affected Versions: psPAS PowerShell module versions prior to 7.0.209 Description: The psPAS PowerShell module does not enforce TLS 1.2 within the Get-PASSAMLResponse function during the SAML authentication process. This allows an unauthenticated attacker in a...
CVE-2025-43331
A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data...
CVE-2025-43331
A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data...
CVE-2025-43331
A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data...
CVE-2025-43331
A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data...
CVE-2025-43331
CVE-2025-43331 describes a downgrade issue caused by insufficiently restricted code signing in macOS Tahoe 26. The vulnerability could allow an app to access protected user data when running on affected macOS Tahoe 26 systems. The CVE entry states the flaw is fixed in macOS Tahoe 26; no exploitat...