5382 matches found
CVE-2025-65472
A Cross-Site Request Forgery CSRF in the /admin/admin.inc.php component of EasyImages 2.0 v2.8.6 and below allows attackers to escalate privileges to Administrator via user interaction with a malicious web page...
CVE-2025-67560
Missing Authorization vulnerability in Webilia Inc. Listdom listdom allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Listdom: from n/a through = 5.0.1...
CVE-2025-67560 WordPress Listdom plugin <= 5.0.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Webilia Inc. Listdom listdom allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Listdom: from n/a through = 5.0.1...
PT-2025-49934
CVE-2025-67560 Missing Authorization vulnerability in Webilia Inc. Listdom listdom allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Listdomā¦ https://t.co/4pTz1t1R85...
PT-2025-48440
Name of the Vulnerable Software and Affected Versions Tekrom Technology Inc. T-Soft E-Commerce versions through 28112025 Description A Cross-Site Request Forgery CSRF issue exists in Tekrom Technology Inc. T-Soft E-Commerce. This allows an attacker to perform actions on behalf of an authenticated...
CVE-2025-25613
FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2.2.0D Build 135103 were discovered to transmit cookies for their web based administrative application containing usernames and passwords. These were transmitted in cleartext usi...
CVE-2025-25613
FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2.2.0D Build 135103 were discovered to transmit cookies for their web based administrative application containing usernames and passwords. These were transmitted in cleartext usi...
CVE-2025-25613
FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2.2.0D Build 135103 were discovered to transmit cookies for their web based administrative application containing usernames and passwords. These were transmitted in cleartext usi...
EUVD-2025-142149
Malicious code in godi-tua-inc npm...
Malicious code in inc-aquamarine-egret (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c32f5718e443805eb02a3691956a419c256d64ca58ca06e0542eae0d60502e12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117308
Malicious code in inc-aquamarine-egret npm...
EUVD-2025-117307
Malicious code in inc-tomato-hoverfly npm...
EUVD-2025-76581
Malicious code in incsailfish-smiletea npm...
EUVD-2025-76585
Malicious code in inccanidae-biggestdev npm...
EUVD-2025-76583
Malicious code in inchedgehog-appteadev npm...
MAL-2025-104060 Malicious code in inc_hedgehog-appteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40c0d9d6ab51bc55bb987929c54cd29bc21b52c67e387f5104b410e79d241708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in inc_spider_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a339e00c6b2d56a554e3792f1b2340e1dfb24307b6b5f9121e9fd546865050d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-85579
Malicious code in incgazellez3n npm...