1711 matches found
Apache StreamPark uses a Weak Encryption Algorithm
Weak Encryption Algorithm in StreamPark, The use of an AES cipher in ECB mode and a weak random number generator for encrypting sensitive data, including JWT tokens, may have risked exposing sensitive authentication data This issue affects Apache StreamPark: from 2.0.0 before 2.1.7. Users are...
CVE-2025-54981
Weak Encryption Algorithm in StreamPark, The use of an AES cipher in ECB mode and a weak random number generator for encrypting sensitive data, including JWT tokens, may have risked exposing sensitive authentication data This issue affects Apache StreamPark: from 2.0.0 before 2.1.7. Users are...
WordPress Tax Service Electronic HDM plugin <= 1.2.0 - Unauthenticated Arbitrary SQL Injection vulnerability
Unauthenticated Arbitrary SQL Injection vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin TAX SERVICE Electronic HDM versions = 1.2.0...
EUVD-2025-200091
SoftSea EPUB File Reader 1.0.0.0 is vulnerable to Directory Traversal. The vulnerability resides in the EPUB file processing component, specifically in the functionality responsible for extracting and handling EPUB archive contents...
PT-2025-48538
Name of the Vulnerable Software and Affected Versions SoftSea EPUB File Reader version 1.0.0.0 Description SoftSea EPUB File Reader version 1.0.0.0 contains a flaw related to directory traversal. This issue is present in the EPUB file processing component, specifically when handling and extractin...
EUVD-2025-199851
Kivitendo before 3.9.2 allows XXE injection. By uploading an electronic invoice in the ZUGFeRD format, it is possible to read and exfiltrate files from the server's filesystem...
CVE-2025-12061
The TAX SERVICE Electronic HDM WordPress plugin before 1.2.1 does not authorization and CSRF checks in an AJAX action, allowing unauthenticated users to import and execute arbitrary SQL statements...
CVE-2025-12061
The TAX SERVICE Electronic HDM WordPress plugin (versions prior to 1.2.1 ) is vulnerable to an unauthenticated arbitrary SQL injection . The root cause is a lack of authorization and Cross-Site Request Forgery (CSRF) checks within an AJAX action. An attacker could exploit this missing security me...
CVE-2025-12061 Tax Service Electronic HDM < 1.2.1 - Unauthenticated Arbitrary SQL Execution
The TAX SERVICE Electronic HDM WordPress plugin before 1.2.1 does not authorization and CSRF checks in an AJAX action, allowing unauthenticated users to import and execute arbitrary SQL statements...
PT-2025-48130
Name of the Vulnerable Software and Affected Versions TAX SERVICE Electronic HDM WordPress plugin versions prior to 1.2.1 Description The TAX SERVICE Electronic HDM WordPress plugin does not perform authorization and Cross-Site Request Forgery CSRF checks in an AJAX action. This allows...
WordPress plugin TAX SERVICE Electronic HDM 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A lack of authorization vulnerability exists in WordPress TAX SERVICE Electronic HDM, which stems from a lack of authorization and CSRF checks in AJAX operations. An attacker...
CVE-2025-10437
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Eksagate Electronic Engineering and Computer Industry Trade Inc. Webpack Management System allows SQL Injection. This issue affects Webpack Management System: through 20251119...
EUVD-2025-117416
Malicious code in electronic-indigo-fish npm...
EUVD-2025-99311
Malicious code in electronickiwiz3n npm...
EUVD-2025-105575
Malicious code in electronicsturgeonz3n npm...
EUVD-2025-92253
Malicious code in electronictarantulaz3n npm...
EUVD-2025-92254
Malicious code in electronicrattlesnakez3n npm...
EUVD-2025-74703
Malicious code in electronicguanblue-58 npm...