522 matches found
WordPress Favicon Generator plugin < 2.1 - Arbitrary File Deletion via CSRF vulnerability
Arbitrary File Deletion via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Favicon Generator versions 2.1...
CVE-2025-66939
Cross Site Scripting vulnerability in 66biolinks by AltumCode v.61.0.1 allows an attacker to execute arbitrary code via a crafted favicon file...
CVE-2025-66939
Cross Site Scripting vulnerability in 66biolinks by AltumCode v.61.0.1 allows an attacker to execute arbitrary code via a crafted favicon file...
CVE-2025-66939
Cross Site Scripting vulnerability in 66biolinks by AltumCode v.61.0.1 allows an attacker to execute arbitrary code via a crafted favicon file...
PT-2026-2271
Name of the Vulnerable Software and Affected Versions 66biolinks version 61.0.1 Description A Cross Site Scripting issue exists in 66biolinks. An attacker can execute arbitrary code by providing a specially crafted favicon file. The issue affects the processing of favicon files. Recommendations...
CVE-2025-66939
Cross Site Scripting vulnerability in 66biolinks by AltumCode v.61.0.1 allows an attacker to execute arbitrary code via a crafted favicon file...
CVE-2025-66939
CVE-2025-66939 is a Cross Site Scripting vulnerability in AltumCode’s 66biolinks, version 61.0.1, where specially crafted favicon files can cause an attacker to execute arbitrary code. The root cause is described as improper handling of favicon files that triggers XSS. The affected software is 66...
AltumCode 66biolinks 安全漏洞
AltumCode 66biolinks is a platform builder script from AltumCode, Inc. A security vulnerability exists in AltumCode 66biolinks version v.61.0.1, which stems from improper handling of specially crafted favicon files and could lead to cross-site scripting attacks...
EUVD-2026-1914
Cross Site Scripting vulnerability in 66biolinks by AltumCode v.61.0.1 allows an attacker to execute arbitrary code via a crafted favicon file...
CVE-2022-0471
The Favicon by RealFaviconGenerator WordPress plugin before 1.3.23 does not properly sanitise and escape the jsonresulturl parameter before outputting it back in the Favicon admin dashboard, leading to a Reflected Cross-Site Scripting issue...
CVE-2024-34416
Unrestricted Upload of File with Dangerous Type vulnerability in Pk Favicon Manager.This issue affects Pk Favicon Manager: from n/a through 2.1...
EUVD-2018-4374
Malware in sbrugna...
EUVD-2016-6233
Malware in sbrugna...
EUVD-2016-3903
Malware in sbrugna...
EUVD-2018-4377
Malware in sbrugna...
EUVD-2016-6249
Malware in sbrugna...
EUVD-2006-6489
Malware in sbrugna...
EUVD-2021-11586
Malware in sbrugna...