MAL-2025-46749 Malicious code in yakutsk-airbnb-webpack-element-ui (npm)

The package yakutsk-airbnb-webpack-element-ui was found to contain malicious code...

Malicious code in element-ui-public-publish-sync (npm)

The package element-ui-public-publish-sync was found to contain malicious code...

Malicious code in sagitta-html-webpack-plugin-element-ui-fomalhaut (npm)

The package sagitta-html-webpack-plugin-element-ui-fomalhaut was found to contain malicious code...

MAL-2025-44127 Malicious code in element-ui-cryptography-gravity-quito (npm)

The package element-ui-cryptography-gravity-quito was found to contain malicious code...

Malicious code in yildun-element-ui-phoebe-protractor (npm)

The package yildun-element-ui-phoebe-protractor was found to contain malicious code...

MAL-2025-46790 Malicious code in yildun-element-ui-phoebe-protractor (npm)

The package yildun-element-ui-phoebe-protractor was found to contain malicious code...

MAL-2025-45945 Malicious code in sagitta-html-webpack-plugin-element-ui-fomalhaut (npm)

The package sagitta-html-webpack-plugin-element-ui-fomalhaut was found to contain malicious code...

MAL-2025-44128 Malicious code in element-ui-public-publish-sync (npm)

The package element-ui-public-publish-sync was found to contain malicious code...

MAL-2025-44129 Malicious code in element-ui-xenon-uranology-bunyan (npm)

The package element-ui-xenon-uranology-bunyan was found to contain malicious code...

MAL-2025-43428 Malicious code in aldebaran-sirius-umbriel-element-ui (npm)

The package aldebaran-sirius-umbriel-element-ui was found to contain malicious code...

CVE-2025-58796

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dudaster Elementor Element Condition ele-conditions allows Stored XSS.This issue affects Elementor Element Condition: from n/a through = 1.0.5...

CVE-2025-58796 WordPress Elementor Element Condition Plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dudaster Elementor Element Condition ele-conditions allows Stored XSS.This issue affects Elementor Element Condition: from n/a through = 1.0.5...

CVE-2025-58796

CVE-2025-58796 is a stored XSS in the WordPress plugin “Elementor Element Condition” (dudaster) affecting versions up to 1.0.5. The issue arises from improper input neutralization during web page generation, enabling script injection via crafted input. Public disclosures in multiple sources (incl...

CVE-2025-58796 WordPress Elementor Element Condition Plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dudaster Elementor Element Condition ele-conditions allows Stored XSS.This issue affects Elementor Element Condition: from n/a through = 1.0.5...

WordPress Elementor Element Condition Plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Que Thanh Tuan Blue Rock in WordPress Plugin Elementor Element Condition versions = 1.0.5...

GHSA-PH2W-CX28-VHRQ TkEasyGUI Affected by Uncontrolled Search Path Element Issue

Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, arbitrary code may be executed with the privilege of running the program...

Uncontrolled Search Path Element

Overview TkEasyGUI is a TkEasyGUI is simple GUI Library for Python3 with Tkinter Affected versions of this package are vulnerable to Uncontrolled Search Path Element via the search path element. An attacker can execute arbitrary code with the privileges of the running program by placing a malicio...

CVE-2025-55671

Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, arbitrary code may be executed with the privilege of running the program...

WordPress plugin Elementor Element Condition 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Linux Distros Unpatched Vulnerability : CVE-2024-24584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds read...