CVE-2025-11988 Crypto Tool <= 2.22 - Missing Authentication to Unauthenticated Limited File Deletion

The Crypto plugin for WordPress is vulnerable to unauthorized manipulation of data in all versions up to, and including, 2.22. This is due to the plugin registering an unauthenticated AJAX action wpajaxnoprivcryptoconnectajaxprocess that allows calling the cryptodeletejson method with only a...

PT-2025-46267

Name of the Vulnerable Software and Affected Versions Crypto plugin for WordPress versions prior to 2.23 Description The Crypto plugin for WordPress is susceptible to unauthorized data manipulation. This is caused by an unauthenticated AJAX action, wp ajax nopriv crypto connect ajax process, whic...

AWS VDP: Responsible disclosure - public S3 bucket exposing JSON/config files

A publicly listable S3 bucket was discovered, exposing various JSON and configuration files. The bucket listing and file metadata were retrievable without authentication...

[SECURITY] Fedora 42 Update: oci-seccomp-bpf-hook-1.2.10-9.fc42

OCI Hook to generate seccomp json files based on EBF syscalls used by contain er oci-seccomp-bpf-hook provides a library for applications looking to use the Container Pod concept popularized by Kubernetes...

EUVD-2021-21699

Malware in sbrugna...

EUVD-2020-23233

Malware in sbrugna...

EUVD-2020-0242

Malware in sbrugna...

EUVD-2021-10427

Malware in sbrugna...

EUVD-2025-18134

Malicious code in bioql PyPI...

EUVD-2024-2805

Malicious code in bioql PyPI...

EUVD-2025-6899

Malicious code in bioql PyPI...

EUVD-2024-3113

Malicious code in bioql PyPI...

EUVD-2025-16716

Malicious code in bioql PyPI...

EUVD-2022-1404

Malicious code in bioql PyPI...

EUVD-2025-31327

Malicious code in bioql PyPI...

CVE-2025-10858 Allocation of Resources Without Limits or Throttling in GitLab

An issue was discovered in GitLab CE/EE affecting all versions before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that allows unauthenticated users to cause a Denial of Service DoS condition while uploading specifically crafted large JSON files...

CVE-2025-10858 Allocation of Resources Without Limits or Throttling in GitLab

An issue was discovered in GitLab CE/EE affecting all versions before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that allows unauthenticated users to cause a Denial of Service DoS condition while uploading specifically crafted large JSON files...

CVE-2025-41428

Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker...

CVE-2025-41428

Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker...

CVE-2025-41428

Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in TimeWorks 10.0 to 10.3. If exploited, arbitrary JSON files on the server may be viewed by a remote unauthenticated attacker...