EUVD-2025-35924

The Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions plugin for WordPress is vulnerable to SQL Injection via the 'wpfs-form-name' parameter in all versions up to, and including, 8.3.1 due to insufficient escaping on the user supplied parameter and lack ...

CVE-2025-9322

CVE-2025-9322 : WordPress plugin Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions (up to and including 8.3.1) is vulnerable to unauthenticated SQL Injection via the wpfs-form-name parameter. The issue arises from insufficient escaping of the user-suppli...

WordPress Stripe Payment Forms plugin <= 8.3.1 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by mikemyers in WordPress Plugin WP Full Stripe Free versions = 8.3.1...

MAL-2025-48597 Malicious code in shadeforge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7eea02ef501299fe8810df8e336242386a2ed75d455554c776bd3e4f4463662 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48594 Malicious code in gamenodev21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eed42bff5f057d49a644923b46ba868c04890e51c77dffc911c3aaa0be4e0640 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-compiler-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4aae44a97a8da023c5a1e6a16ecf72e6213bbaeb5ec752ea9e903d15a1287d79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b6d6c0aead094725047d0ea623f7c50d3f1c9634f1381cdf31a484100178974 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48580 Malicious code in node-get-listener (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bac8d13d5bfac4dd2762c47c3c87beec273f4f7481b6d8b5d405bc5d5a9fa3f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in useradm-enterprise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce2bcbfbdffbf03bd25822f3d63f902505a6edc5efb3ef610fce41007b8620b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in useradm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24e5e47f716e1c63744a02d8c2704930bd59cb6b296800dc847bd394dc381cf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mender-flash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d47579a45c1a2efddc746cda2163ebd2588c6d62f3b6349ae9ae21f43327b9a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mender-configure-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e954036412bb11454b4f5fb99bb6ac9b672d9b5542bdbaf870a9a0e20b444d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mender-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7db45b762045779c0566cc967511852ceac9bebb9a2a09ceed1eda3c44c3e296 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mender-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95b2a0aeb7e210157ad59facfa9c0e679873c34a71078e93e3410440365970a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48571 Malicious code in mender-conductor-enterprise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a94fd07c8d4a77f846cebefc65582f689ea864796af0d0cbff8241f82d31a97e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deployments-enterprise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ba6d5d2de9ef4fd28b80daa2474015f2574ae70d3ccb9ea5c41c73c2f846bda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48561 Malicious code in deployments-enterprise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ba6d5d2de9ef4fd28b80daa2474015f2574ae70d3ccb9ea5c41c73c2f846bda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-56008

Cross site scripting XSS vulnerability in KeeneticOS before 4.3 at "Wireless ISP" page allows attackers located near to the router to takeover the device via adding additional users with full permissions...

CVE-2025-62688 AutomationDirect Productivity Suite Incorrect Permission Assignment for Critical Resource

An incorrect permission assignment for a critical resource vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an attacker with low-privileged credentials to change their role, gaining full control access to the project...

EUVD-2025-35693

CRLF-injection in KeeneticOS before 4.3 at "/auth" API endpoint allows attackers to take over the device via adding additional users with full permissions by managing the victim to open page with exploit...