152 matches found
CVE-2025-14132 Category Dropdown List <= 1.0 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
The Category Dropdown List plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $SERVER'PHPSELF' variable in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
EUVD-1999-0801
Malware in sbrugna...
EUVD-1999-1403
Malware in sbrugna...
EUVD-2012-2241
Malware in sbrugna...
EUVD-2003-1157
Malware in sbrugna...
EUVD-2011-3587
Malware in sbrugna...
EUVD-1999-0672
Malware in sbrugna...
EUVD-1999-1003
Malware in sbrugna...
EUVD-2001-0087
Malware in sbrugna...
EUVD-2001-1326
Malware in sbrugna...
EUVD-2020-5171
Malware in sbrugna...
EUVD-2002-1223
Malware in sbrugna...
EUVD-2003-0167
Malware in sbrugna...
EUVD-1999-1088
Malware in sbrugna...
EUVD-2019-11469
Malware in sbrugna...
EUVD-2010-2933
Malware in sbrugna...
EUVD-2004-1677
Malware in sbrugna...
EUVD-2024-41711
Malicious code in bioql PyPI...
ROS-20250923-21
A vulnerability in the Golang programming language is related to insufficient validation of the PATH environment variable in the LookPath. Exploitation of the vulnerability could allow a remote attacker to escalate privileges on the system...
CVE-2025-47906
If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath "", ".", and "..", can result in the binaries listed in the PATH being unexpectedly returned...