251 matches found
EUVD-2006-3483
Malware in sbrugna...
EUVD-2015-7282
Malware in sbrugna...
EUVD-2018-16887
Malware in sbrugna...
EUVD-2018-21598
Malware in sbrugna...
EUVD-2017-8125
Malware in sbrugna...
EUVD-2022-5983
Malicious code in bioql PyPI...
EUVD-2025-31678
Malicious code in bioql PyPI...
CVE-2025-8214
The The Pack Elementor addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Typing Letter widget in all versions up to, and including, 2.1.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-8214
The The Pack Elementor addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Typing Letter widget in all versions up to, and including, 2.1.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-8214 The Pack Elementor addon <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typing Letter Widget
The The Pack Elementor addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Typing Letter widget in all versions up to, and including, 2.1.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-8214
CVE-2025-8214 concerns The Pack Elementor addon for WordPress. The vulnerability is a Stored Cross-Site Scripting (XSS) in the widget “Typing Letter”, affecting all versions up to and including 2.1.5. Root cause is insufficient input sanitization and output escaping on user-supplied attributes, e...
CVE-2025-8214 The Pack Elementor addon <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typing Letter Widget
The The Pack Elementor addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Typing Letter widget in all versions up to, and including, 2.1.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
PT-2025-39938
Name of the Vulnerable Software and Affected Versions The Pack Elementor addon plugin for WordPress versions prior to 2.1.6 Description The software is susceptible to Stored Cross-Site Scripting through the Typing Letter widget. Insufficient input sanitization and output escaping on user-supplied...
Malicious code in string-letter-bee (npm)
The package string-letter-bee was found to contain malicious code...
MAL-2025-34094 Malicious code in string-letter-bee (npm)
The package string-letter-bee was found to contain malicious code...
Scam hunter scammed by tax office impersonators
The next time you shake your head at another online scam and vow that you'd never fall for it, remember that even the most tech-savvy people can sometimes slip up. A case in point: Julie-Anne Kearns. This self-made scam-hunter told her story to the Guardian last week, revealing how she had been...
CVE-2024-44860
An information disclosure vulnerability in the /Letter/PrintQr/ endpoint of Solvait v24.4.2 allows attackers to access sensitive data via a crafted request...
CVE-2023-28635
vantage6 is privacy preserving federated learning infrastructure. Prior to version 4.0.0, malicious users may try to get access to resources they are not allowed to see, by creating resources with integers as names. One example where this is a risk, is when users define which users are allowed to...
CVE-2006-3488
Absolute path traversal vulnerability in administrador.asp in VirtuaStore 2.0 allows remote attackers to possibly read arbitrary directories or files via an absolute path with Windows drive letter in the Pasta parameter when link=util, acao=ftp, and acaba=sim...
SUSE CVE-2025-4035
A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix domains if the domain contains at least two components and includes an uppercase character. This bypasses public suffix protections and could allow a malicious website to set...