Malicious code in additor-elements-client (npm)

The package additor-elements-client was found to contain malicious code...

Malicious code in skyflow-elements-update (npm)

The package skyflow-elements-update was found to contain malicious code...

MAL-2025-33389 Malicious code in skyflow-elements-update (npm)

The package skyflow-elements-update was found to contain malicious code...

nice-elements (>=1.1.2, <=1.13.7), olaii-web-common (>=1.0.0, <=1.0.33) potentially affected by unknown CVE via angular-truncate (0.0.1-security)

angular-truncate NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on angular-truncate and may be impacted: - nice-elements =1.1.2, =1.0.0, =1.0.33 Source cves: unknown CVE Source advisory: OSV:MAL-2025-14532...

MAL-2025-14075 Malicious code in additor-elements-evo (npm)

The package additor-elements-evo was found to contain malicious code...

Malicious code in additor-elements-evo (npm)

The package additor-elements-evo was found to contain malicious code...

MAL-2025-15653 Malicious code in bh-elements (npm)

The package bh-elements was found to contain malicious code...

MAL-2025-14073 Malicious code in additor-elements (npm)

The package additor-elements was found to contain malicious code...

Malicious code in bh-elements (npm)

The package bh-elements was found to contain malicious code...

MAL-2025-14074 Malicious code in additor-elements-client (npm)

The package additor-elements-client was found to contain malicious code...

MAL-2025-40631 Malicious code in ysb-ui-elements (npm)

The package ysb-ui-elements was found to contain malicious code...

CVE-2025-49758

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2025-54669

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RomanCode MapSVG mapsvg allows SQL Injection.This issue affects MapSVG: from n/a through 8.7.4...

CVE-2025-49758

CVE-2025-49758 affects Microsoft SQL Server (e.g., SQL Server 2017 line) and is described as an elevation-of-privilege vulnerability caused by improper neutralization of certain elements in SQL commands (SQL injection) that can be exploited by an authenticated, network-present attacker to gain el...

CVE-2025-6253

The UiCore Elements – Free Elementor widgets and templates plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.3.0 via the preparetemplate function due to a missing capability check and insufficient controls on the filename specified. This makes it...

CVE-2025-6253

The CVE-2025-6253 entry concerns the WordPress plugin UiCore Elements (Free Elementor widgets/templates) with versions up to and including 1.3.0. The vulnerability is an Arbitrary File Read caused by a missing capability check and insufficient controls on the filename in the prepare_template() fu...

CVE-2025-6253 UiCore Elements <= 1.3.0 - Missing Authorization to Unauthenticated Arbitrary File Read

The UiCore Elements – Free Elementor widgets and templates plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.3.0 via the preparetemplate function due to a missing capability check and insufficient controls on the filename specified. This makes it...

CVE-2025-6253 UiCore Elements <= 1.3.0 - Missing Authorization to Unauthenticated Arbitrary File Read

The UiCore Elements – Free Elementor widgets and templates plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.3.0 via the preparetemplate function due to a missing capability check and insufficient controls on the filename specified. This makes it...

WordPress plugin UiCore Elements 安全漏洞

WordPress UiCore Elements plugin is a plugin designed for the Elementor page builder to extend its functionality and enhance website design capabilities. An arbitrary file read vulnerability exists in the WordPress UiCore Elements plugin, which stems from the application's inadequate protection o...

PT-2025-32603 · Sap · Sap Fiori

Name of the Vulnerable Software and Affected Versions: SAP Fiori Launchpad affected versions not specified Description: SAP Fiori Launchpad is susceptible to a Reverse Tabnabbing issue stemming from insufficient external navigation protection for its link elements . An attacker with administrativ...