50486 matches found
WordPress Alt Text Generator AI plugin <= 1.8.3 - Missing Authorization to Authenticated (Subscriber+) API Key Deletion vulnerability
Missing Authorization to Authenticated Subscriber+ API Key Deletion vulnerability discovered by Legion Hunter in WordPress Plugin Alt Text Generator AI versions = 1.8.3...
WordPress Asgaros Forum plugin <= 3.2.1 - Cross-Site Request Forgery to Subscription Settings Update vulnerability
Cross-Site Request Forgery to Subscription Settings Update vulnerability discovered by Brian Mungai in WordPress Plugin Asgaros Forum versions = 3.2.1...
Malicious code in rough_wildebeest_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19108e27330f7983ea1c58606bfe8b88286db86f41acf90b79117985b4756a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
SUSE CVE-2025-64181
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.0 through 3.3.5 and 3.4.0 through 3.4.2, while fuzzing openexrexrcheckfuzzer, Valgrind reports a conditional branch depending on...
CVE-2025-60646
A stored cross-site scripting XSS in the Business Line Management module of Xxl-api v1.3.0 attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter...
Malicious code in expected_canidae_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77fd1475cf7ce725b97bfa95629f2e66c90a4938b96b52222c1d923bf8124128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fadhil-jengkol66-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270591510e12ef8056d9c14bfb93cf840613bf75c0ca3d5798a6bf33b158392b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-102632
Malicious code in riana-mendoan50-riris npm...
EUVD-2025-102967
Malicious code in prospectivechickenz3n npm...
EUVD-2025-97978
Malicious code in innocentwormz3n npm...
MAL-2025-129244 Malicious code in oktafian-sego44-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1fecf663cf2789e10fb7d1aa17449610ecde65885d4cd795c5452676cf253c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-40744
A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 11. Affected applications do not properly validate client certificates to connect to License Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks...
CVE-2025-40744
A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 11. Affected applications do not properly validate client certificates to connect to License Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks...
CVE-2025-40744
Summary: CVE-2025-40744 affects Solid Edge SE2025 prior to V225.0 Update 11, where the License Service endpoint fails to properly validate client certificates, enabling a potential man-in-the-middle for unauthenticated attackers. Both Red Hat and PT security sources confirm the issue and the affe...
EUVD-2025-94875
Malicious code in survivinglocustz3n npm...
EUVD-2025-105999
Malicious code in continuingguppyz3n npm...
EUVD-2025-105178
Malicious code in flutteringcarpz3n npm...
EUVD-2025-96312
Malicious code in nadia-serimuka24-breki npm...