396 matches found
CVE-2025-67529
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in OpalWP Fashion fashion2 allows PHP Local File Inclusion.This issue affects Fashion: from n/a through 5.3.0...
CVE-2025-67525
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in OpalWP ekommart ekommart allows PHP Local File Inclusion.This issue affects ekommart: from n/a through 4.3.1...
PT-2025-49901
Name of the Vulnerable Software and Affected Versions Opal WP ekommart versions prior to 4.3.1 Description A flaw exists in Opal WP ekommart that allows for PHP Local File Inclusion due to improper control of filename for include/require statements. This issue impacts the software’s handling of...
PT-2025-49905
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Opal WP Fashion fashion2 allows PHP Local File Inclusion.This issue affects Fashion: from n/a through 5.3.0...
EUVD-2025-81048
Malicious code in opal-teadev npm...
Malicious code in opal-teadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3460e36d9f25cb51487dd18663ed170d0c4b88157d54d9f76708f3f418f31417 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-106739 Malicious code in opal-teadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3460e36d9f25cb51487dd18663ed170d0c4b88157d54d9f76708f3f418f31417 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990454)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990454 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/xics: fix refcount leak in icpopalinit The offindcompatiblenode function returns a node...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989620)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989620 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/xics: fix refcount leak in icpopalinit The offindcompatiblenode function returns a node...
CVE-2025-62913
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpopal Opal Service opal-service allows Stored XSS.This issue affects Opal Service: from n/a through = 1.9.1...
EUVD-2025-36026
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpopal Opal Service opal-service allows Stored XSS.This issue affects Opal Service: from n/a through = 1.9.1...
CVE-2025-62913
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpopal Opal Service opal-service allows Stored XSS.This issue affects Opal Service: from n/a through = 1.9.1...
CVE-2025-62913 WordPress Opal Service plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpopal Opal Service opal-service allows Stored XSS.This issue affects Opal Service: from n/a through = 1.9.1...
CVE-2025-62913 WordPress Opal Service plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpopal Opal Service opal-service allows Stored XSS.This issue affects Opal Service: from n/a through = 1.9.1...
CVE-2025-62913
CVE-2025-62913 refers to a stored XSS in the WordPress Opal Service (opal-service) plugin, attributed to “Improper Neutralization of Input During Web Page Generation.” Red Hat, NVD, and PatchStack entries consistently describe the vulnerability as affecting Opal Service versions from n/a through ...
WordPress plugin Opal Service 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
PT-2025-43791
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpopal Opal Service opal-service allows Stored XSS.This issue affects Opal Service: from n/a through = 1.9.1...
EUVD-2012-5507
Malware in sbrugna...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-419776)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-419776 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opalpowercapinit kasprintf returns a pointer to...
