4 matches found
CVE-2026-15647
The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'brbrandtooltip' Term Meta Field in all versions up to, and including, 3.8.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
MAL-2025-140359 Malicious code in canopus-hermes-postcss-loader-xanthus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64932e18462641061057f9a0061b3b7e8ed093628d7603b096014c31006ad72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-62788
Summary: CVE-2025-62788 affects Wazuh versions prior to 4.11.0. The vulnerability is a heap use-after-free in w_copy_event_for_log() where memory allocated in OS_CleanMSG() is referenced after it has been freed. A compromised or attacker-controlled agent can craft and send a message to the Wazuh ...
