8371 matches found
CVE-2025-10586 Community Events <= 1.5.1 - Unauthenticated SQL Injection
The Community Events plugin for WordPress is vulnerable to SQL Injection via the ‘eventvenue’ parameter in all versions up to, and including, 1.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3.1)
The version of AOS installed on the remote host is prior to 7.3.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.3.1 advisory. - LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4write32 related to LZ4compressdestSize, affecting applications that cal...
AlmaLinux 10 : python3.12 (ALSA-2025:10140)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:10140 advisory. cpython: Tarfile extracts filtered members when errorlevel=0 CVE-2025-4435 cpython: Bypass extraction filter to modify file metadata outside extraction...
[SECURITY] [DLA 4324-1] python-django security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4324-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb October 07, 2025 https://wiki.debian.org/LTS -...
CVE-2025-10649 Welcart e-Commerce <= 2.11.21 - Authenticated (Author+) SQL Injection via Cookie
The Welcart e-Commerce plugin for WordPress is vulnerable to SQL Injection via the cookie in all versions up to, and including, 2.11.21 due to insufficient escaping on the user supplied value and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated...
CVE-2025-10587 Community Events <= 1.5.1 - Unauthenticated SQL Injection
The Community Events plugin for WordPress is vulnerable to SQL Injection via the eventcategory parameter in all versions up to, and including, 1.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
PT-2025-41247
Name of the Vulnerable Software and Affected Versions Welcart e-Commerce plugin for WordPress versions through 2.11.21 Description The Welcart e-Commerce plugin for WordPress is susceptible to SQL Injection through the cookie. Insufficient escaping of user-supplied values and inadequate preparati...
PT-2025-41223
Name of the Vulnerable Software and Affected Versions RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress versions through 6.0.6.2 Description The RegistrationMagic plugin for WordPress is susceptible to SQL Injection due to inadequate...
CVE-2025-8406
ZenML version 0.83.1 is affected by a path traversal vulnerability in the PathMaterializer class. The load function uses ispathwithindirectory to validate files during data.tar.gz extraction, which fails to effectively detect symbolic and hard links. This vulnerability can lead to arbitrary file...
EUVD-2017-11887
Malware in sbrugna...
EUVD-2021-0952
Malware in sbrugna...
EUVD-2007-1628
Malware in sbrugna...
EUVD-2017-8990
Malware in sbrugna...
EUVD-2002-0396
Malware in sbrugna...
EUVD-2017-15079
Malware in sbrugna...
EUVD-2018-0706
Malware in sbrugna...
EUVD-2018-9315
Malware in sbrugna...
EUVD-2017-14325
Malware in sbrugna...