Malicious code in avatar2-full-april-2023-movie-gregerz (npm)

The package avatar2-full-april-2023-movie-gregerz was found to contain malicious code...

MAL-2025-44332 Malicious code in free-spins-in-coin-master-full-guide-2023-kdfkdz (npm)

The package free-spins-in-coin-master-full-guide-2023-kdfkdz was found to contain malicious code...

Malicious code in avatar2-full-2023-movie-dkzldz (npm)

The package avatar2-full-2023-movie-dkzldz was found to contain malicious code...

MAL-2025-43550 Malicious code in avatar2-full-2023-movie-dkzldz (npm)

The package avatar2-full-2023-movie-dkzldz was found to contain malicious code...

MAL-2025-43551 Malicious code in avatar2-full-april-2023-movie-gregerz (npm)

The package avatar2-full-april-2023-movie-gregerz was found to contain malicious code...

Malicious code in jfrog-alfheim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81aec3e5e257dac330f6d3f73c310c476b4926e6cd0040f2ac70b7a4f45005aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-58789

CVE-2025-58789 describes an SQL Injection in the WordPress plugin WP Full Stripe Free (affected: versions up to 8.3.0; some sources cite until 8.2.5 and up to 8.3.0). The vulnerability arises from improper neutralization of special elements in SQL commands, enabling an attacker to potentially man...

CVE-2025-58789 WordPress WP Full Stripe Free Plugin <= 8.2.5 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeisle WP Full Stripe Free wp-full-stripe-free allows SQL Injection.This issue affects WP Full Stripe Free: from n/a through = 8.2.5...

CVE-2025-58789 WordPress WP Full Stripe Free Plugin <= 8.2.5 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeisle WP Full Stripe Free wp-full-stripe-free allows SQL Injection.This issue affects WP Full Stripe Free: from n/a through = 8.2.5...

WordPress WP Full Stripe Free Plugin <= 8.2.5 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by Que Thanh Tuan Blue Rock in WordPress Plugin WP Full Stripe Free versions = 8.2.5...

Malicious code in yui2-treeview (npm)

The package yui2-treeview was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe84263428228e04358ddd36ac76a8372fa21980918b3a9acd4144397683ea32 Any computer that has this package installed or running should be considered fully...

Malicious code in moodle-core_filepicker (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949643a56d52397b063c5839facff57f6727e833e3f48ffaa24500c64ac29d53 Any computer that has this package installed or running should be considered...

CVE-2025-57147

A SQL Injection vulnerability was found in phpgurukul Complaint Management System 2.0. The vulnerability is due to lack of input validation of multiple parameters including fullname, email, and contactno in user/registration.php...

PT-2025-36129

Name of the Vulnerable Software and Affected Versions: WP Full Stripe Free versions through 8.3.0 Description: WP Full Stripe Free is susceptible to a SQL injection flaw due to improper neutralization of special elements within SQL commands. Recommendations: Update WP Full Stripe Free to a versio...

WordPress plugin WP Full Stripe Free SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

Malicious code in rtk-wake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fc493187ac88a35f426edb64ab97f58fcd188ce208058c832d5bd05143ec899 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in library.cycle.e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73b010d9a667293958470880270b863c3eae2d00bdca71e08f3bddcbfd0947c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

smb: client: fix potential UAF in cifs_dump_full_key()

...

net: libwx: remove duplicate page_pool_put_full_page()

...

Malicious code in mathy-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40181e61c8885579610a7982c1d9bb6de781022905e9b58618fd8206ba45347b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...