EUVD-2025-18234

Malicious code in bioql PyPI...

CVE-2025-5233

CVE-2025-5233 affects the WordPress Color Palette plugin. A Stored XSS vulnerability exists via the hex parameter in all versions up to 4.3.2, exploitable by authenticated attackers with Contributor-level access and above to inject scripts on pages viewed by users. The issue stems from insufficie...

CVE-2025-5233: Improper Neutralization of Input During Web Page Generation

The Color Palette plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘hex’ parameter in all versions up to, and including, 4.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

CVE-2022-33204

Four OS command injection vulnerabilities exists in the web interface /action/wirelessConnect functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP reque...

PT-2022-21741 · Abode Systems · Iota All-In-One Security Kit

Name of the Vulnerable Software and Affected Versions: Abode Systems, Inc. iota All-In-One Security Kit versions 6.9X and 6.9Z Description: The issue is related to OS command injection vulnerabilities in the web interface /action/wirelessConnect functionality. A specially-crafted HTTP request can...