WordPress plugin Gecko 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

PT-2026-1645

Name of the Vulnerable Software and Affected Versions JanStudio Gecko versions through 1.9.8 Description The software contains an Improper Control of Filename for Include/Require Statement issue, also known as a PHP Remote File Inclusion. This allows for PHP Local File Inclusion. Recommendations...

WordPress Gecko theme <= 1.9.8 - Local File Inclusion vulnerability

Software : Gecko Type : Theme Vulnerable versions : = 1.9.8 OWASP Top 10 : A3: Injection Classification : Local File Inclusion CVE ID : CVE-2025-69080 Patchstack priority : High CVSS severity : 8.1 Required privilege : Unauthenticated Developer : Claim ownership PSID : 0d458b5a65e6 Credits : Tran...

WordPress Gecko theme <= 1.9.8 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Gecko versions = 1.9.8...

PT-2026-21721

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 148 Firefox ESR versions prior to 115.33 Firefox ESR versions prior to 140.8 Thunderbird versions prior to 148 Thunderbird versions prior to 140.8 Description The Audio/Video: GMP component contains incorrect boundary...

CVE-2025-14326

Use-after-free in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 146 and Thunderbird 146...

CVE-2025-14326 Use-after-free in the Audio/Video: GMP component

Use-after-free in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 146 and Thunderbird 146...

Mozilla -- Use-after-free

https://bugzilla.mozilla.org/showbug.cgi?id=1840666 reports: Use-after-free in the Audio/Video: GMP component...

Silicon Labs Gecko SDK 安全漏洞

The Silicon Labs Gecko SDK GSDK is an open source library from Silicon Labs. Combines the Silicon Labs Wireless Software Development Kit SDK and the Gecko platform into one integrated package. A security vulnerability exists in Silicon Labs Gecko SDK GSDK that stems from a malformed grouping atta...

Malicious code in sleepy-coral-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6aa97bd2e151bacb79b96414ee5f8a710a91208bc49c16b8e842ea40b7a2e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117091

Malicious code in sleepy-coral-gecko npm...

Malicious code in muddy_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44efbe5e11836f40d281009a1937f03ea208bd2a8ed109aeaaf3078f6dc9572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135593 Malicious code in muddy_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44efbe5e11836f40d281009a1937f03ea208bd2a8ed109aeaaf3078f6dc9572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f29c4bb131cdff5e6bef837002a35c4da51994352b59663cfec6798321c1482e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frail_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4219cce9791fd7c2669dd34e41fc9978651dc9840ac3920d37fe04d068354690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125638 Malicious code in crooked_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e39daedd741125dbca2e77b6a7126455d0713d1818897bb3706e2e85b5352c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-105954

Malicious code in deafgeckoz3n npm...

MAL-2025-122513 Malicious code in plain_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c881dc115a4e05ef5fca917986e9a9fcdc2d750dfd5e6343255089c9dcf0856e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-88883

Malicious code in secretgeckoz3n npm...

Malicious code in precious_gecko-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc3c7f1d5542f6ad5f19beeabf22343fa0f1eb9feabc70097a159b8be8354d87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...