38624 matches found
Malicious code in moodle-core-notification-dialogue (npm)
The package moodle-core-notification-dialogue was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0744d3959a7e6cf0b70432a2b72939c580eb705bf7e14a8f4569ae3e0f571164 Any computer that has this package installed or running should be...
Malicious Package
Overview moodle-core-notification-dialogue is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...
MAL-2025-42152 Malicious code in moodle-core-notification-dialogue (npm)
The package moodle-core-notification-dialogue was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0744d3959a7e6cf0b70432a2b72939c580eb705bf7e14a8f4569ae3e0f571164 Any computer that has this package installed or running should be...
Malware in moodle-core-notification-dialogue
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
WordPress plugin Pushe Web Push Notification has a cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
PT-2025-36160
Name of the Vulnerable Software and Affected Versions: wpdever WP Notification Bell versions through 1.4.5 Description: The software contains a Stored Cross-Site Scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Update wpdever WP Notification...
WordPress Plugin Notification for Telegram: Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forge...
PT-2025-36134
Name of the Vulnerable Software and Affected Versions: rainafarai Notification for Telegram versions n/a through 3.4.6 Description: A Cross-Site Request Forgery CSRF vulnerability exists in rainafarai Notification for Telegram, allowing attackers to perform actions on behalf of an unsuspecting...
CVE-2025-58873: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pusheco Pushe Web Push Notification pushe-webpush allows Stored XSS.This issue affects Pushe Web Push Notification: from n/a through = 0.5.0...
CVE-2025-58794: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in rainafarai Notification for Telegram notification-for-telegram allows Cross Site Request Forgery.This issue affects Notification for Telegram: from n/a through = 3.5...
CVE-2025-58821: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdever WP Notification Bell wp-notification-bell allows Stored XSS.This issue affects WP Notification Bell: from n/a through = 1.4.6...
WordPress plugin WP Notification Bell has a cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2025-22427
In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to grant notification access above the lock screen due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...
CVE-2025-22421
In contentDescForNotification of NotificationContentDescription.kt, there is a possible notification content leak through the lockscreen due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...
CVE-2025-48556
In multiple methods of NotificationChannel.java, there is a possible desynchronization from persistence due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2025-26442
In onCreate of NotificationAccessConfirmationActivity.java, there is a possible incorrect verification of proper intent filters in NLS due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed f...
CVE-2025-26442
In onCreate of NotificationAccessConfirmationActivity.java, there is a possible incorrect verification of proper intent filters in NLS due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed f...
No we didn’t warn all Gmail users about imminent digital doom, says Google
Cybersecurity publications are rife with headlines about breaches and threats, but sometimes things aren't always what they seem. In fact sometimes they're plain wrong remember toothbrushgate? This week, Google highlighted another story that it said was fake - and this one was about its own...
