CVE-2025-2578 Booking for Appointments and Events Calendar – Amelia <= 1.2.19 - Unauthenticated Full Path Disclosure

The Booking for Appointments and Events Calendar Amelia plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.2.19 via the 'wpAmeliaApiCall' function. This makes it possible for unauthenticated attackers to retrieve the full path of the web application...

CVE-2025-2578

CVE-2025-2578 (Amelia plugin for Booking/Events Calendar, WordPress) reports a Full Path Disclosure vulnerability in the wpAmeliaApiCall function. Affected: Booking for Appointments and Events Calendar – Amelia for WordPress, versions prior to or equal to 1.2.19. Impact: an unauthenticated attack...

CVE-2025-2578 Booking for Appointments and Events Calendar – Amelia <= 1.2.19 - Unauthenticated Full Path Disclosure

The Booking for Appointments and Events Calendar Amelia plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.2.19 via the 'wpAmeliaApiCall' function. This makes it possible for unauthenticated attackers to retrieve the full path of the web application...

Malicious code in @takamol/qiwa-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a7c1ac0d47b523e1de684384da892f0683a8d543b56659127eb98ea88c1466a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @takamol/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67b5584d88d529b51cf18b19dbc2c0944ee8b54e09fbe249eceb421fba596344 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oasis-os-theming (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c78b9623607cccee2c32ab0a4090f9758e28614db6074a8a5dce410658c0ae0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in osxlocation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 070d31af50179f9a0b4cbd8dc75d3bb1e6b873b3b0dee8490eb4d252e5179f45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @mukesh-d11/testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d20ad4be51546dacd490a45160968ae270951a7485eeb7a2ad2f3438efc63a1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Unitree Go 1 安全漏洞

Unitree Go 1 is a robotic dog from the Chinese company Unitree. Unitree Go 1 suffers from a security vulnerability that stems from an undocumented backdoor that could lead to full remote control of the device by the manufacturer or a person in possession of an API key...

WordPress Booking for Appointments and Events Calendar – Amelia plugin <= 1.2.19 - Unauthenticated Full Path Disclosure vulnerability

Unauthenticated Full Path Disclosure vulnerability discovered by zhuxuan wu in WordPress Plugin Amelia versions = 1.2.19...

Nethermind Juno Potential Denial of Service (DoS) via Integer Overflow

An integer overflow in Nethermind Juno before v0.12.5 within the Sierra bytecode decompression logic within the "cairo-lang-starknet-classes" library could allow remote attackers to trigger an infinite loop and high CPU usage by submitting a malicious Declare v2/v3 transaction. This results in a...

CVE-2025-29072

An integer overflow in Nethermind Juno before v.12.05 within the Sierra bytecode decompression logic within the "cairo-lang-starknet-classes" library could allow remote attackers to trigger an infinite loop and high CPU usage by submitting a malicious Declare v2/v3 transaction. This results in a...

Malicious code in test-utils-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c296c435648a7ea93add03c751dc85edae75eeaf8f9e36b3059aa28846dc654 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cln-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56b9cc716f2f19131b4daf97b6c72c4b58b5b71d337760dc41188971098e4fb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-fiber-debugger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00a91ebc181430303bf3b5c3bc93cd1bf2a4b2727ab2767fa5998456f8602156 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in realtime-solar-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1632f239d70140dcb116eb7fecdf6fba75631259d95e280f2e487f6acfd79133 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in awesome-camera (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0049f4e25e583544388265d12d7760dde826982f89f8dae49f1e4e544f25bea9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2675 Malicious code in gson-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd315ab6614bdf716d90b22ff2804ff7594f8bfe856133c0d60bebaf9d241e79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gson-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd315ab6614bdf716d90b22ff2804ff7594f8bfe856133c0d60bebaf9d241e79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2692 Malicious code in newtheme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37975c22c99a1fe8dd968985aa358d4982778370c1eae16b94fd12afb266fc32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...