8066 matches found
CVE-2025-9501
The W3 Total Cache WordPress plugin, in versions prior to 2.8.13 , contains a command injection vulnerability within the _parse_dynamic_mfunc function. This flaw allows unauthenticated users to execute arbitrary PHP commands by submitting a comment containing a malicious payload to a post. The vu...
OESA-2025-2648 golang security update
. Security Fixes: tar.Reader in the Go archive/tar component did not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions could cause a Reader to read an unbounded amount of data fr...
Improper Input Validation
github.com/nyaruka/phonenumbers is vulnerable to Improper Input Validation. The vulnerability is due to insufficient validation of syntactic correctness in the phonenumbers.Parse function, which allows an attacker to provide crafted input and cause a panic resulting in a “runtime error: slice...
EUVD-2025-179634
Malicious code in commitlint-config-angular-forever-dotenv-parse-variables-google npm...
EUVD-2025-179708
Malicious code in cloud-star-parse-fork-sandbox npm...
EUVD-2025-176725
Malicious code in reject-report-water-thread-parse npm...
EUVD-2025-177317
Malicious code in parse-key-lambda-new-socket npm...
EUVD-2025-177133
Malicious code in playwright-dotenv-parse-variables-parcel-less npm...
EUVD-2025-175781
Malicious code in upsilon-parse-module-virtualize-sandbox npm...
EUVD-2025-177711
Malicious code in nashira-dotenv-parse-variables-gulp-lynx npm...
EUVD-2025-179090
Malicious code in epsilon-protected-reject-parse-benchmark npm...
EUVD-2025-176221
Malicious code in star-permission-parse-assert-small npm...
EUVD-2025-175848
Malicious code in uglify-parse-socket-new-error npm...
EUVD-2025-175548
Malicious code in winston-adonis-dotenv-parse-variables-dagda npm...
EUVD-2025-175920
Malicious code in tool-dotenv-parse-variables-gravitationalwave-luna npm...
EUVD-2025-179115
Malicious code in enum-parse-protected-kernel-refactor npm...
EUVD-2025-177646
Malicious code in neptunology-husky-dotenv-parse-variables-got npm...
EUVD-2025-176212
Malicious code in static-transpile-sanitize-emulate-parse npm...