WordPress Sahifa theme < 5.8.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Sahifa versions 5.8.6...

CVE-2025-59258

creationtimestamp| type| source ---|---|--- 2025-10-14 16:03:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0310 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-24 06:24:42+00:00| seen|...

WordPress WP Scraper plugin <= 5.8.1 - Authenticated (Administrator+) Server-Side Request Forgery vulnerability

Authenticated Administrator+ Server-Side Request Forgery vulnerability discovered by Valatty in WordPress Plugin TwentyFourth WP Scraper versions = 5.8.1...

QNAP QTS Video Station SQLi Vulnerability (QSA-25-32)

QNAP Video Station is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

EUVD-2025-31261

Malicious code in bioql PyPI...

CVE-2024-56804

An SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.4 and later...

CVE-2024-56804

Video Station is affected by an SQL injection vulnerability (CVE-2024-56804). The issue requires an attacker who has already gained a user account to trigger SQL injection and execute unauthorized code or commands on the system. The vulnerability exists in versions prior to 5.8.4 and has been fix...

CVE-2024-56804 Video Station

An SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.4 and later...

PT-2025-40543

Name of the Vulnerable Software and Affected Versions Video Station versions prior to 5.8.4 Description An SQL injection issue exists in Video Station. A remote attacker who has obtained a user account can potentially execute unauthorized code or commands. Recommendations Update to Video Station...

QNAP Video Station SQL注入漏洞

QNAP Video Station is a multimedia application from Taiwan, China-based QNAP Technology QNAP. A SQL injection vulnerability exists in QNAP Video Station versions prior to 5.8.4. The vulnerability stems from insufficient validation of input and could lead to a SQL injection attack...

PT-2025-40429

Name of the Vulnerable Software and Affected Versions Traccar versions 5.8 through 6.0 Traccar versions 6.1 through 6.8.1 Description Traccar, an open source GPS tracking system, has a flaw that allows for unauthenticated local file inclusion attacks. This can result in the disclosure of password...

Linux Distros Unpatched Vulnerability : CVE-2025-58457

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper permission check in ZooKeeper AdminServer lets authorized clients to run snapshot and restore command with insufficient permissions. This issue affects...

CVE-2025-60143 WordPress Netgsm plugin <= 2.9.69 - Broken Access Control vulnerability

Missing Authorization vulnerability in netgsm Netgsm netgsm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Netgsm: from n/a through = 2.9.69...

CVE-2025-60143 WordPress Netgsm plugin <= 2.9.69 - Broken Access Control vulnerability

Missing Authorization vulnerability in netgsm Netgsm netgsm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Netgsm: from n/a through = 2.9.69...

PT-2025-39463

Name of the Vulnerable Software and Affected Versions hutool versions prior to 5.8.4 Description An issue exists in the QLExpressEngine class that allows attackers to execute arbitrary expressions, potentially leading to arbitrary method invocation and remote code execution RCE. Recommendations...

CVE-2025-56769

An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary method invocation and potentially remote code execution RCE via the QLExpressEngine class...

CVE-2025-58245

CVE-2025-58245 is a cross-site scripting vulnerability described as DOM-based XSS in the Portfolio plugin (BestWebSoft) for WordPress. The initial document states Portfolio versions up to and including 2.58 are affected (noted as from n/a through

Linux Distros Unpatched Vulnerability : CVE-2022-4398

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0. CVE-2022-4398 Note that Nessus relies on the presence of the package as...

MAL-2025-41340 Malicious code in typescript-5.8 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e5beba7c2e6c6b468d2708bf24ba287dcdd016c8345420d5535bf883e8158af9 The OpenSSF Package Analysis project identified 'typescript-5.8' @...

CVE-2025-8023

Mattermost versions 10.8.x = 10.8.3, 10.5.x = 10.5.8, 9.11.x = 9.11.17, 10.9.x = 10.9.2 fails to sanitize path traversal sequences in template file destination paths, which allows a system admin to perform path traversal attacks via malicious path components, potentially enabling malicious file...