WordPress WP Compress for MainWP plugin <= 6.50.17 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin WP Compress for MainWP versions = 6.50.17...

CVE-2025-62593

Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against browser-based attacks, as the current defense us...

EUVD-2025-198306

SOPlanning is vulnerable to Stored XSS in /status endpoint. Malicious attacker with an account can inject arbitrary HTML and JS into website, which will be rendered/executed when opening multiple pages. This issue was fixed in version 1.55...

CVE-2025-62729

SOPlanning is vulnerable to Stored XSS in /status endpoint. Malicious attacker with an account can inject arbitrary HTML and JS into website, which will be rendered/executed when opening multiple pages. This issue was fixed in version 1.55...

CVE-2025-62729 Stored XSS in SOPlanning

SOPlanning is vulnerable to Stored XSS in /status endpoint. Malicious attacker with an account can inject arbitrary HTML and JS into website, which will be rendered/executed when opening multiple pages. This issue was fixed in version 1.55...

CVE-2025-6599

An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50ABVY.6.3C0 and earlier could allow an attacker to perform Slowloris‑style denial‑of‑service DoS attacks. Such attacks may temporarily block legitimate HTTP requests and partially disrupt...

CVE-2025-8693

A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50ABVY.6.3C0 and earlier could allow an authenticated attacker to execute operating system OS commands on an affected device...

CVE-2025-8693

A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50ABVY.6.3C0 and earlier could allow an authenticated attacker to execute operating system OS commands on an affected device...

CVE-2025-6599

The CVE-2025-6599 entry affects Zyxel DX3301-T0, specifically firmware version 5.50(ABVY.6.3)C0 and earlier. The issue is in the web server component and causes uncontrolled resource consumption, enabling Slowloris-style denial-of-service that can temporarily block legitimate HTTP requests and pa...

Mozilla Firefox < 51.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 51.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-01 advisory. - A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired...

Mozilla Firefox < 52.0

The version of Firefox installed on the remote Windows host is prior to 52.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-05 advisory. - Mozilla developers and community members Carsten Book, Calixte Denizet, Christian Holler, Andrew McCreight, David Bolte...

CVE-2025-40778 affecting package bind for versions less than 9.16.50-3

CVE-2025-40778 affecting package bind for versions less than 9.16.50-3. A patched version of the package is available...

CVE-2025-40780 affecting package bind for versions less than 9.16.50-3

CVE-2025-40780 affecting package bind for versions less than 9.16.50-3. A patched version of the package is available...

KLA90930 OSI vulnerability in Git for Windows

Information disclosure vulnerability was found in Git for Windows. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories Git for Windows 2.52.0 Exploitation Public exploits exist for this vulnerability. Related products Git-for-Windows CVE list...

Malicious code in alvino-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361ee2335fc4c9fda89683fd8a1b7eca8a60dd1617a2f8394054f279e3e0f6d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 146504a69ebd3f3dc97a4976f2268db27b464079718103ab3a3f9dba2471f7dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 840922427064e56918a010f863aa9cd3ea1728ee24162a8c9d867f52c37ca5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e17f2d7be616295578fa0643425f6e8b123043a645f43148571236a710da9e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-reborn50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0ce6ac77e61309eca464b3d0274739aee865be04364d7956ddc3f113ac6564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161941 Malicious code in nasrul-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e00c4cf6df8d16059a9dedd54462c6e901f3beae4100b27262f5f09f685c9f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...