CVE-2026-24544

Missing Authorization vulnerability in Harmonic Design HD Quiz hd-quiz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HD Quiz: from n/a through = 2.0.9...

CVE-2026-24544 WordPress HD Quiz plugin <= 2.0.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Harmonic Design HD Quiz hd-quiz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HD Quiz: from n/a through = 2.0.9...

CVE-2026-24544 WordPress HD Quiz plugin <= 2.0.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Harmonic Design HD Quiz hd-quiz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HD Quiz: from n/a through = 2.0.9...

CVE-2026-24544

Missing Authorization vulnerability in Harmonic Design HD Quiz hd-quiz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HD Quiz: from n/a through = 2.0.9...

WordPress plugin HD Quiz security vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

CVE-2025-13876 Rareprob HD Video Player All Formats App com.rocks.music.videoplayer path traversal

A security vulnerability has been detected in Rareprob HD Video Player All Formats App 12.1.372 on Android. Impacted is an unknown function of the component com.rocks.music.videoplayer. The manipulation leads to path traversal. The attack needs to be performed locally. The exploit has been...

Malicious Package

Overview old-hd-keyring is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Rareprob HD Video Player All Formats 路径遍历漏洞

Rareprob HD Video Player All Formats is a video player from Rareprob India. A path traversal vulnerability exists in Rareprob HD Video Player All Formats version 12.1.372, which stems from a path traversal issue in the component com.rocks.music.videoplayer...

EUVD-2025-200009

Malicious code in old-hd-keyring npm...

Malicious code in old-hd-keyring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76ef85d765687b32fe83742e0a4f907c5d56d21de209f95162b35069a627fdb2 The package old-hd-keyring was found to contain malicious code. Source: ghsa-malware c6b34006e53801700292b4e5ca7b328b4c0bd3c549e7c0d291478c081c7fc735...

MAL-2025-191501 Malicious code in old-hd-keyring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76ef85d765687b32fe83742e0a4f907c5d56d21de209f95162b35069a627fdb2 The package old-hd-keyring was found to contain malicious code. Source: ghsa-malware c6b34006e53801700292b4e5ca7b328b4c0bd3c549e7c0d291478c081c7fc735...

CVE-2020-36874

ACE SECURITY WIP-90113 HD cameras contain an unauthenticated configuration disclosure vulnerability in the /web/cgi-bin/hi3510/backup.cgi endpoint. The endpoint permits remote download of a compressed configuration backup without requiring authentication or authorization. The exposed backup may...

CGGMP21 presignatures can be used in the way that significantly reduces security

This attack is against presignatures used in very specific context: Presignatures + HD wallets derivation: security level reduces to 85 bits \ Previously you could generate a presignature, and then choose a HD derivation path while issuing a partial signature via Presignature::setderivationpath,...

CGGMP21 presignatures can be used in the way that significantly reduces security

This attack is against presignatures used in very specific context: Presignatures + HD wallets derivation: security level reduces to 85 bits \ Previously you could generate a presignature, and then choose a HD derivation path while issuing a partial signature via Presignature::setderivationpath,...

CVE-2025-63292

Freebox v5 HD firmware = 1.7.20, Freebox v5 Crystal firmware = 1.7.20, Freebox v6 Révolution r1–r3 firmware = 4.7.x, Freebox Mini 4K firmware = 4.7.x, and Freebox One firmware = 4.7.x were discovered to expose subscribers' IMSI identifiers in plaintext during the initial phase of EAP-SIM...

EUVD-2025-143347

Malicious code in anidata-hd-matsafifdi npm...

EUVD-2025-143355

Malicious code in anidata-hd-maisa npm...

EUVD-2025-143349

Malicious code in anidata-hd-matsafdi npm...

EUVD-2025-143356

Malicious code in anidata-hd-mafdidsa npm...

MAL-2025-172945 Malicious code in anidata-hd-maa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cf764405cc2df65945a36b843db7fc53cfc264287ce974678bf3fb14dd0b062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...