3970 matches found
WordPress plugin Image Gallery – Photo Grid & Video Gallery 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin Image...
CVE-2025-13891: Improper Limitation of a Pathname to a Restricted Directory
The Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.13.3. This is due to the modulalistfolders AJAX endpoint that lacks proper path validation and base directory restrictions. While the endpoint verifies user...
WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Doan Dinh Van in WordPress Plugin Post Grid and Gutenberg Blocks versions = 2.3.23...
Malicious Package
Overview tailwind-grid-tools is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of this...
The Dark Side of Flexibility: How Aggregated Cyberattacks Threaten the Power Grid
Flexible energy resources are increasingly becoming common in smart grids. These resources are typically managed and controlled by aggregators that coordinate many resources to provide flexibility services. However, these aggregators and flexible energy resources are vulnerable, which could allow...
WordPress Grid KIT Portfolio plugin <= 2.2.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ DOM-Based Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin Grid KIT Portfolio versions = 2.2.1...
WordPress plugin Image Gallery – Photo Grid & Video Gallery 授权问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. An authorization issue...
CVE-2025-12494: Improper Authorization
The Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ajaximportfile function in all versions up to, and including, 2.12.28. This makes it possible for authenticated attackers, with author-level...
Grid-STIX: A STIX 2.1-Compliant Cyber-Physical Security Ontology for Power Grid
Modern electrical power grids represent complex cyber-physical systems requiring specialized cybersecurity frameworks beyond traditional IT security models. Existing threat intelligence standards such as STIX 2.1 and MITRE ATT&CK lack coverage for grid-specific assets, operational technology...
The vulnerability of the ImageItem_Grid::get_decoder() function in the image-items/grid.cc component allows a hacker to execute arbitrary code. This vulnerability exists in the decoder and file format encoder provided by the libheif library.
The vulnerability of the ImageItemGrid::getdecoder function in the image-items/grid.cc component, which is responsible for decoding and encoding file formats for the libheif library, stems from the use of a null pointer. Exploiting this vulnerability could allow an attacker to execute arbitrary...
CISA Releases 18 Industrial Control Systems Advisories
CISA released 18 Industrial Control Systems ICS Advisories. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-317-01 Mitsubishi Electric MELSEC iQ-F Series ICSA-25-317-02 AVEVA Application Server IDE ICSA-25-317-03...
EUVD-2025-176302
Malicious code in socket-table-grid-sigma-deserialize npm...
EUVD-2025-176083
Malicious code in table-link-chi-grid-byte npm...
EUVD-2025-175666
Malicious code in warn-array-container-grid-stub npm...
EUVD-2025-175485
Malicious code in xi-grid-module-sed-warn npm...
EUVD-2025-177517
Malicious code in nu-grid-import-chi-assert npm...
EUVD-2025-177476
Malicious code in old-grid-permission-gamma-web npm...
EUVD-2025-177183
Malicious code in pi-compress-grid-class-fast npm...