8924 matches found
Malicious code in analytics-end-of-page (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @test6uy767/back-end (npm)
--- -= Per source details. Do not edit below this line.=-...
WhatsApp says Paragon is spying on specific users
WhatsApp has accused the professional spyware company Paragon of spying on a select group of users. WhatsApp, the Meta-owned, end-to-end encrypted messaging platform, said it has reliable information that nearly 100 journalists and other “members of civil society” were targets of a spyware campai...
CVE-2025-22703 WordPress Forge – Front-End Page Builder plugin <= 1.4.6 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
Cross-Site Request Forgery CSRF vulnerability in manuelvicedo Forge – Front-End Page Builder forge allows Stored XSS.This issue affects Forge – Front-End Page Builder: from n/a through = 1.4.6...
PT-2025-1556 · Digiever · Digiever Ds-2105 Pro
Name of the Vulnerable Software and Affected Versions: Digiever DS-2105 Pro version 3.1.0.71-11 Description: The issue allows for arbitrary file read through the access device.cgi file on affected devices. This problem only affects products that are no longer supported by the manufacturer...
CVE-2025-22957
A SQL injection vulnerability exists in the front-end of the website in ZZCMS = 2023, which can be exploited without any authentication. This vulnerability could potentially allow attackers to gain unauthorized access to the database and extract sensitive information...
CVE-2025-22957
A SQL injection vulnerability exists in the front-end of the website in ZZCMS = 2023, which can be exploited without any authentication. This vulnerability could potentially allow attackers to gain unauthorized access to the database and extract sensitive information...
PT-2025-2209 · WordPress · The Custom Login Page Styler – Limit Login Attempts – Restrict Content With Login – Redirect After Login – Change Login Url – Sign In
Name of the Vulnerable Software and Affected Versions: The Custom Login Page Styler – Limit Login Attempts – Restrict Content With Login – Redirect After Login – Change Login URL – Sign in , Sign out plugin for WordPress versions up to, and including, 7.1.1 Description: The issue is related to...
ZZCMS 安全漏洞
ZZCMS is a content management system CMS from the ZZCMS team in China. A security vulnerability exists in ZZCMS version 2023 and earlier versions. The vulnerability stems from the front-end website not being effectively protected against SQL injection, which allows attackers to gain unauthorized...
D-Link DAP-2555 DoS Vulnerability (SAP10232)
D-Link DAP-2555 devices are prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
WordPress plugin Custom Login Page Styler 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...
PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
PT-2025-4750 · Zzcms · Zzcms
Name of the Vulnerable Software and Affected Versions: ZZCMS versions = 2023 Description: A SQL injection issue exists in the front-end of the website, which can be exploited without any authentication. This could potentially allow attackers to gain unauthorized access to the database and extract...
[SECURITY] [DLA 4036-1] debian-security-support update
Debian LTS Advisory DLA-4036-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón January 30, 2025 https://wiki.debian.org/LTS Package : debian-security-support Version : 1:11+2025.01.30 Debian Bug : 1087718 1094651 debian-security-support, the Debian security...
Debian dla-4036 : debian-security-support - security update
The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4036 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4036-1 [email protected] https://www.debian.org/lts/security/...
ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
...
The vulnerabilities of the functions blkFlushCompleteSeq() and flushEndIo() in the block component (block/blk-flush.c) of the Linux operating system allow a hacker to trigger a service failure.
The vulnerabilities of the functions blkFlushCompleteSeq and flushEndIo in the block component block/blk-flush.c of the Linux kernel are related to improper initialization. Exploiting these vulnerabilities can allow an attacker to cause a service failure...
CVE-2023-50316
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database...
AutoLib Software Systems OPAC 安全漏洞
AutoLib Software Systems OPAC is a library management software from AutoLib Software Systems. A security vulnerability exists in AutoLib Software Systems OPAC version v20.10, which stems from the exposure of multiple API keys in the code. An attacker could use these keys to access back-end APIs o...