WordPress Export All Posts, Products, Orders, Refunds & Users plugin <= 2.13 - Unauthenticated PHP Object Injection vulnerability

Unauthenticated PHP Object Injection vulnerability discovered by Webbernaut in WordPress Plugin WP Ultimate Exporter versions = 2.13...

AZL-58413 CVE-2025-22870 affecting package prometheus-process-exporter for versions less than 0.8.2-2

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to ".example.com", a request to "::1%25.example.com:80 will incorrectly match and not be proxied...

AZL-58422 CVE-2025-22870 affecting package prometheus-node-exporter for versions less than 1.7.0-3

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to ".example.com", a request to "::1%25.example.com:80 will incorrectly match and not be proxied...

Malicious code in grafana-resources-exporter-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32638374c532240fe824d5d3467c0adbbf3fc762b0efc727f36fc93271e9933b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2174 Malicious code in grafana-resources-exporter-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32638374c532240fe824d5d3467c0adbbf3fc762b0efc727f36fc93271e9933b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2022-46146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a Prometheus web.yml file and...

CVE-2025-26995

Missing Authorization vulnerability in Anton Vanyukov Market Exporter market-exporter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Market Exporter: from n/a through = 2.0.21...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: argo-events, certificate-transparency, grafana-operator, kubevela, kubernetes, smarter-device-manager, gitea, temporal-ui-server, velero-plugin-for-microsoft-azure, multus-cni, ferretdb, petname, cosign, dex, render-template, scorecard, helm-operator, xcaddy, hcloud,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-metrics-scraper, secrets-store-csi-driver-provider-gcp, cni-plugins, grafana-operator, kubevela, oras, hello-world-golang, smarter-device-manager, q, dive, thanos, temporal-ui-server, kubeflow-pipelines, litefs, task, aws-efs-csi-driver, gitness,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-metrics-scraper, secrets-store-csi-driver-provider-gcp, cni-plugins, grafana-operator, kubevela, oras, hello-world-golang, smarter-device-manager, q, dive, thanos, temporal-ui-server, kubeflow-pipelines, litefs, task, aws-efs-csi-driver, gitness,...

CVE-2025-26995

Missing Authorization vulnerability in Anton Vanyukov Market Exporter market-exporter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Market Exporter: from n/a through = 2.0.21...

CVE-2025-26995 WordPress Market Exporter plugin <= 2.0.21 - Broken Access Control vulnerability

Missing Authorization vulnerability in Anton Vanyukov Market Exporter market-exporter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Market Exporter: from n/a through = 2.0.21...

CVE-2025-26995

CVE-2025-26995 corresponds to a Missing Authorization vulnerability in Market Exporter. Connected data show affected software Market Exporter versions

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: aws-flb-kinesis-fips, newrelic-infra-operator, prometheus-bind-exporter, bank-vaults, mods, kubernetes-ingress-defaultbackend, crossplane-provider-gcp, fulcio-fips, gostatsd, kubebuilder, dockerize, lazygit, secrets-store-csi-driver-provider-azure, rootlesskit, step,...

WordPress plugin Market Exporter 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

WordPress Market Exporter plugin <= 2.0.21 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Market Exporter versions = 2.0.21...

Malicious code in clubhouse-to-linear-exporter (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 763c04a1400336e5c62621aba4027b81dfb2b2ba0b01ec823e0f4f62703e0eed Any computer that has this package install...

MAL-2025-1523 Malicious code in clubhouse-to-linear-exporter (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 763c04a1400336e5c62621aba4027b81dfb2b2ba0b01ec823e0f4f62703e0eed Any computer that has this package install...

CVE-2023-45288 affecting package prometheus-node-exporter for versions less than 1.7.0-2

CVE-2023-45288 affecting package prometheus-node-exporter for versions less than 1.7.0-2. A patched version of the package is available...

WordPress WP Ultimate Exporter plugin <= 2.9.3 - Information Disclosure Through Unprotected Directory vulnerability

Information Disclosure Through Unprotected Directory vulnerability discovered by Webbernaut in WordPress Plugin WP Ultimate Exporter versions = 2.9.3...