EUVD-2025-203925

The Ultimate Member plugin for WordPress is vulnerable to Profile Privacy Setting Bypass in all versions up to, and including, 2.11.0. This is due to a flaw in the secure fields mechanism where field keys are stored in the allowed fields list before the requiredperm check is applied during...

Powerstone Affiliate Me SQL注入漏洞

Powerstone Affiliate Me is an affiliate marketing management system from Powerstone Ghana. A SQL injection vulnerability exists in Powerstone Affiliate Me version 5.0.1, which stems from improper manipulation of the admin.php endpoint id parameter, which could lead to a SQL injection attack...

Improper Session Expiration Enforcement

org.keycloak, keycloak-services is vulnerable to improper session expiration enforcement. The vulnerability is due to session expiration logic relying on a session-local “remember-me” flag without validating the current realm-level configuration, which allows an attacker to exploit existing...

keycloak-server: Too long and not settings compliant session

A flaw was found in Keycloak. Keycloak does not immediately enforce the disabling of the "Remember Me" realm setting on existing user sessions. Sessions created while "Remember Me" was active retain their extended session lifetime until they expire, overriding the administrator's recent security...

More on Rewiring Democracy

It's been a month since Rewiring Democracy: How AI Will Transform Our Politics, Government, and Citizenship was published. From what we know, sales are good. Some of the book's forty-three chapters are available online: chapters 2, 12, 28, 34, 38, and 41. We need more reviews--six on Amazon is no...

EUVD-2025-140741

Malicious code in kim-jiwon-me npm...

EUVD-2025-143170

Malicious code in budi-me-lodo npm...

Malicious code in budi-me-lodo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf99b0a5ec0798c75c092bbc7a09b34448b9f7dd687289f02c651303d8b1a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-144705

Malicious code in apasih-me-polda npm...

EUVD-2025-144704

Malicious code in apasih-me-poldoa npm...

Malicious code in apasih-me-pol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2eb836723c59d77948c5217891c4691bc7d0faa90e46250d91397cc1cd6b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-144706

Malicious code in apasih-me-pol npm...

EUVD-2025-144709

Malicious code in apasih-me-pantekail npm...

EUVD-2025-144715

Malicious code in apasih-me-p npm...

EUVD-2025-144707

Malicious code in apasih-me-po npm...

EUVD-2025-144711

Malicious code in apasih-me-panteka npm...

EUVD-2025-144714

Malicious code in apasih-me-pa npm...

EUVD-2025-144713

Malicious code in apasih-me-pant npm...

EUVD-2025-144710

Malicious code in apasih-me-pantekai npm...

Malicious code in apasih-me-pantekail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb193f2ac09c625e93f7d12b2b7af2db7e347e3071b32da764b64d81dfbd029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...