EUVD-2017-0832

Malware in sbrugna...

EUVD-2017-15347

Malware in sbrugna...

EUVD-2017-15319

Malware in sbrugna...

CVE-2025-49844

creationtimestamp| type| source ---|---|--- 2025-10-04 13:44:10+00:00| seen| https://bsky.app/profile/high-risk-cve.bsky.social/post/3m2epov6pmx2d 2025-10-06 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-933/ 2025-10-06 06:38:14+00:00| seen|...

EUVD-2025-22035

Malicious code in bioql PyPI...

EUVD-2023-1849

Malicious code in bioql PyPI...

EUVD-2025-2655

Malicious code in bioql PyPI...

EUVD-2024-18889

Malicious code in bioql PyPI...

CVE-2025-59943

creationtimestamp| type| source ---|---|--- 2025-10-03 12:29:30+00:00| published-proof-of-concept| https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-9wj2-4hcm-r74j 2025-10-04 13:42:10+00:00| seen| https://bsky.app/profile/high-risk-cve.bsky.social/post/3m2eplcmaaf2o...

WordPress Podlove Podcast Publisher plugin <= 4.2.6 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin Podlove Podcast Publisher versions = 4.2.6...

CVE-2025-10776

CVE-2025-10776 affects LionCoders SalePro POS up to version 5.5.0 (and prior) with a vulnerability in the Login component that leads to cleartext transmission of sensitive information. The issue can be exploited remotely and is described as high complexity with difficult exploitability. Public ex...

WordPress Propovoice plugin <= 1.7.6.7 - Unauthenticated Arbitrary File Read vulnerability

Unauthenticated Arbitrary File Read vulnerability discovered by mikemyers in WordPress Plugin Propovoice CRM versions = 1.7.6.7...

WordPress PeachPay Payments plugin <= 1.117.5 - Authenticated (Contributor+) SQL Injection via order_by Parameter vulnerability

Authenticated Contributor+ SQL Injection via orderby Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin PeachPay Payments versions = 1.117.5...

Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation

Summary The OAuth client creation and update endpoints of the Fides Webserver API do not properly authorize scope assignment. This allows highly privileged users with client:create or client:update permissions to escalate their privileges to owner-level. Details When creating or updating OAuth...

GHSA-HJFH-P8F5-24WR Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation

Summary The OAuth client creation and update endpoints of the Fides Webserver API do not properly authorize scope assignment. This allows highly privileged users with client:create or client:update permissions to escalate their privileges to owner-level. Details When creating or updating OAuth...

⚡ Weekly Recap: Drift Breach Chaos, Zero-Days Active, Patch Warnings, Smarter Threats & More

Cybersecurity never slows down. Every week brings new threats, new vulnerabilities, and new lessons for defenders. For security and IT teams, the challenge is not just keeping up with the news—it's knowing which risks matter most right now. That's what this digest is here for: a clear, simple...

WordPress Credit Card Experience Theme <= 1.2.15 is vulnerable to Local File Inclusion

Software Credit Card Experience Type Theme Vulnerable versions = 1.2.15 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 660aaadb7556 Credits Tran Nguyen Bao Khanh VCI - VNPT...

WordPress ProDent Theme <= 1.5.9 is vulnerable to Local File Inclusion

Software ProDent Type Theme Vulnerable versions = 1.5.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 720bb591f012 Credits Bonds Required privilege Unauthenticated Published ...

WordPress Hogwords Theme <= 1.2.6 is vulnerable to Local File Inclusion

Software Hogwords Type Theme Vulnerable versions = 1.2.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID ee13435740c8 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress OldStory Theme <= 2.15.0 is vulnerable to Local File Inclusion

Software OldStory Type Theme Vulnerable versions = 2.15.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 042c808c05ce Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...