1056 matches found
WordPress Plugin MxChat Information Disclosure Vulnerability
WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin MxChat, which stems from...
WordPress Plugin SSP Debug Information Disclosure Vulnerability
WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in WordPress plugin SSP Debug, which stems from...
CVE-2025-0003
Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in loss of confidentiality or availability...
WordPress Plugin Seriously Simple Podcasting Information Disclosure Vulnerability
WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin Seriously Simple...
CVE-2025-41016
CVE-2025-41016 affects Davantis DFUSION v6.177.7. The vulnerability is an inadequate access control that lets unauthorised actors access alarm media via /alarms//, where MEDIA can be snapshot or video.mp4, exposing images/videos from triggered alerts. CVSSv4 base score 8.7 (HIGH) with NETWORK att...
WordPress SureForms plugin information disclosure vulnerability
WordPress SureForms plugin is a drag-and-drop form builder plugin designed for WordPress, supporting the creation of multi-step forms, dialog forms and other complex features, no programming can quickly build forms. WordPress SureForms plugin suffers from an information disclosure vulnerability...
Siemens RUGGEDCOM Devices Inadequate Encryption Strength (CVE-2021-37209)
The SSH server on affected devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in- the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device. This plugin only works with...
CVE-2025-59480
Mattermost Mobile Apps (Android/iOS) versions up to and including 2.32.0 are affected by an insufficient verification of SSO redirect tokens. The root cause is failure to verify that SSO tokens originate from a trusted server, enabling a malicious Mattermost instance or an on-path attacker to obt...
EUVD-2025-91150
Malicious code in inadequatecodz3n npm...
EUVD-2025-79045
Malicious code in inadequatesalamanderz3n npm...
Malicious code in inadequate_basilisk_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f250cce740cc240519f29603ba867419e19ea36e9ff3f4938645332efd27f632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-63585
Malicious code in inadequatebasiliskz3n npm...
EUVD-2025-63581
Malicious code in inadequateunicornz3n npm...
EUVD-2025-85582
Malicious code in inadequatetapirz3n npm...
MAL-2025-78915 Malicious code in inadequate_zebra_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe55e438961f83d097544d31a5b1c9c1ce02bdccddd0dd90d2f23e7fde436d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53827
Malicious code in inadequate-bronze-kangaroo npm...
EUVD-2025-53826
Malicious code in inadequate-emerald-porpoise npm...
EUVD-2025-53824
Malicious code in inadequate-indigo-parrot npm...