531 matches found
CVE-2025-11467
CVE-2025-11467 affects the WordPress plugin “RSS Aggregator by Feedzy” (Feedzy RSS/Feedzy RSS Feeds). The vulnerability is a Blind Server-Side Request Forgery in the feedzy_lazy_load function, exploitable in all versions up to and including 5.1.1. It allows unauthenticated attackers to issue web ...
CVE-2025-11467 RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 5.1.1 - Unauthenticated Blind Server-Side Request Forgery
The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 5.1.1 via the feedzylazyload function. This makes it possible for unauthenticated attacker...
PT-2025-50568
The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 5.1.1 via the feedzy lazy load function. This makes it possible for unauthenticated...
Exploit for CVE-2025-55182
CVE-2025-55182 Raw HTTP Requests to exploit the insecure lazy...
Malicious code in lazy_wolf_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 002a1017620983818112bf6fbd1bfee45e6e0c6fa1ea29707510244ac596ea99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-104245
Malicious code in lazytarantulaz3n npm...
EUVD-2025-104244
Malicious code in lazywolfz3n npm...
EUVD-2025-96861
Malicious code in lazydragonflyz3n npm...
EUVD-2025-96862
Malicious code in lazyamphibianz3n npm...
EUVD-2025-63357
Malicious code in lazycaterpillarz3n npm...
Malicious code in lazy_caterpillar_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c4345dd8afeabc41a7facb59c3d8f6c61aa664db958832d96ff2418b5fdd957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-87763 Malicious code in lazy_elephant_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86304fe9ff397be0ea1829f292ffd224b489a16c9145f7bf60ce73c980196ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-85040
Malicious code in lazyelephantz3n npm...
Malicious code in lazy-sapphire-cattle (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797c5ff62fe005596b7cdd6ca8c4de1f4e733bc7d0e68ca073824716267e48ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53574
Malicious code in lazy-sapphire-cattle npm...
EUVD-2025-53575
Malicious code in lazy-magenta-dog npm...
EUVD-2025-53576
Malicious code in lazy-fuchsia-clam npm...
MAL-2025-69075 Malicious code in lazy-sapphire-cattle (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797c5ff62fe005596b7cdd6ca8c4de1f4e733bc7d0e68ca073824716267e48ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lazy-magenta-dog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba193a368057a545eb832f707d6ac91355d50f84b8ef33bfb83c27f5881bab45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...