EUVD-2025-54401

Malicious code in far-cyan-mite npm...

EUVD-2025-54402

Malicious code in far-aquamarine-parakeet npm...

WordPress Find And Replace content plugin cross-site scripting vulnerability

WordPress Find And Replace content plugin is a plugin used to batch find and replace the specified text in the website content, mainly used to solve the problem of batch modification in the website content update demand. A cross-site scripting vulnerability exists in the WordPress Find And Replac...

CVE-2025-10313

The Find And Replace content for WordPress plugin for WordPress is vulnerable to unauthorized Stored Cross-Site Scripting and Arbitrary Content Replacement due to a missing capability check on the faradminajaxfun function in all versions up to, and including, 1.1. This makes it possible for...

PT-2025-42298

Name of the Vulnerable Software and Affected Versions Find And Replace content for WordPress plugin versions prior to 1.2 Description The Find And Replace content for WordPress plugin for WordPress is susceptible to unauthorized Stored Cross-Site Scripting and Arbitrary Content Replacement. This ...

EUVD-2021-11711

Malware in sbrugna...

EUVD-2008-4721

Malware in sbrugna...

EUVD-2012-1655

Malware in sbrugna...

EUVD-2003-1435

Malware in sbrugna...

@capriza/far (>=0.1.2, <=2.4.2), @cobalt-engine/cobower (2.0.0) +160 more potentially affected by CVE-2025-59343 via tar-fs (>=1.0.0, <=1.16.3)

tar-fs NPM version =1.0.0, =0.1.2, =6.0.3, =6.0.3, =6.0.3, =2.1.1, =0.10.2, =0.0.0-beta.1, =0.0.0-beta.1, =0.0.0-beta.1, =0.1.0, =0.1.0, =1.0.5, =1.1.5 - @elm-node/npm-scripts 1.0.0 - @hlsrules-test/fc-libreoffice 1.0.0 and more Source cves: CVE-2025-59343 Source advisory: OSV:GHSA-VJ76-C3G6-QR5V...

@capriza/far (>=0.1.2, <=2.4.2), @cobalt-engine/cobower (2.0.0) +428 more potentially affected by CVE-2025-59343 via tar-fs (>=0.1.8, <=1.16.3)

tar-fs NPM version =0.1.8, =0.1.2, =6.0.3, =6.0.3, =6.0.3, =2.1.1, =0.10.2, =0.0.0-beta.1, =0.0.0-beta.1, =0.0.0-beta.1, =0.1.0, =0.1.0, =1.0.5, =1.1.5 - @elm-node/npm-scripts 1.0.0 - @hlsrules-test/fc-libreoffice 1.0.0 and more Source cves: CVE-2025-59343 Source advisory: MEND:CVE-2025-59343...

MAL-2025-10006 Malicious code in @zalastax/nolb-_far (npm)

The package @zalastax/nolb-far was found to contain malicious code...

Malicious code in @zalastax/nolb-_far (npm)

The package @zalastax/nolb-far was found to contain malicious code...

A Swedish MMA Tournament Spotlights the Trump Administration's Handling of Far-Right Terrorism

A member of a California-based fight club seems to have attended an event hosted by groups with ties to an organization the US government labeled a terrorist group. Will the Trump administration care?...

CVE-2021-24799

The Far Future Expiry Header WordPress plugin before 1.5 does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

Malicious code in far-teal-platypus (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9627 Malicious code in far-teal-platypus (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9626 Malicious code in far-gray-pike (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in far-gray-pike (npm)

--- -= Per source details. Do not edit below this line.=-...

PT-2024-38845 · Faronics · Deep Freeze

Name of the Vulnerable Software and Affected Versions: Deep Freeze version 9.00.020.5760 Description: The issue is an out-of-bounds read vulnerability in the FarDisk.sys driver of Deep Freeze. It can be triggered by the 0x70014 IOCTL code. This vulnerability is locally exploitable and can lead to...