5645 matches found
CVE-2025-12349 Email Subscribers & Newsletters <= 5.9.10 - Missing Authentication to Unauthenticated Mailing Queue Trigger
The Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin for WordPress is vulnerable to Authorization in versions up to, and including, 5.9.10. This is due to the plugin not properly verifying that a user is authorized to perform an action in the...
PT-2025-47426
The Icegram Express - Email Subscribers, Newsletters and Marketing Automation Plugin for WordPress is vulnerable to Authorization in versions up to, and including, 5.9.10. This is due to the plugin not properly verifying that a user is authorized to perform an action in the trigger mailing queue...
Vulnerabilities fixed in Cisco Unified Contact Center Express
Cisco has fixed vulnerabilities in Cisco Unified Contact Center Express CCX. The vulnerabilities are in the Java RMI process and the Contact Center Express Editor of Cisco Unified CCX. Unauthenticated attackers can exploit these vulnerabilities to upload files, execute commands with root privileg...
EUVD-2025-176820
Malicious code in radiant-express-sync-tachyon npm...
EUVD-2025-177910
Malicious code in meissa-optimize-css-assets-webpack-plugin-express-lint-staged npm...
EUVD-2025-176091
Malicious code in sync-decoherence-xanthus-express npm...
EUVD-2025-178952
Malicious code in express-superflare-antares-loopback npm...
Malicious code in radiant-express-sync-tachyon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc11ed6a8c3867ed71199224db53e25c2338a7f38da642038050bbef32d06101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177361
Malicious code in paleoecology-tardigrade-express-rocket npm...
EUVD-2025-178168
Malicious code in kuiperbelt-yakutsk-bioinformatics-express npm...
EUVD-2025-176819
Malicious code in radiant-express-terser-bellatrix npm...
EUVD-2025-176969
Malicious code in proxima-antimatter-express-redis npm...
Malicious code in elara-express-babel-meteor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab76e836e3b58249794cc58f0387e341cbcb4f07e8b2c7fcde64da9830361a30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189083 Malicious code in rate-limiter-express-iota-registry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 220e622d69063b2b40c1d75c8eae318670c90278bb98cfed61a265a93595e3db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177165
Malicious code in pino-pretty-yildun-express-graphql npm...
EUVD-2025-178955
Malicious code in express-cors-dysonswarm-async npm...
EUVD-2025-175928
Malicious code in toml-json-express-event npm...
EUVD-2025-178063
Malicious code in lithosphere-browserify-express-spectron npm...