CVE-2025-11270: Improper Neutralization of Input During Web Page Generation

The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titleTag' attribute in all versions up to, and including, 5.7.1 due to insufficient input sanitization and output escaping. This makes it possib...

CVE-2025-11361: Server-Side Request Forgery (SSRF)

The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.7.1 via the ebsaveaigeneratedimage function. This makes it possible for authenticated attackers, with Author-leve...

CVE-2025-61581

UNSUPPORTED WHEN ASSIGNED Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control. This issue affects Apache Traffic Control: all versions. People with access to the management interface of the Traffic Router component could specify malicious patterns and cause...

Pattern Enhanced Multi-Turn Jailbreaking: Exploiting Structural Vulnerabilities in Large Language Models

Large language models LLMs remain vulnerable to multi-turn jailbreaking attacks that exploit conversational context to bypass safety constraints gradually. These attacks target different harm categories like malware generation, harassment, or fraud through distinct conversational approaches...

New Microsoft Secure Future Initiative (SFI) patterns and practices: Practical guides to strengthen security

Building on the momentum of our initial launch of the Microsoft Secure Future Initiative SFI patterns and practices, this second installment continues our commitment to making security implementation practical and scalable. The first release introduced a foundational library of actionable guidanc...

EUVD-2007-1655

Malware in sbrugna...

EUVD-2015-8266

Malware in sbrugna...

EUVD-2007-1653

Malware in sbrugna...

EUVD-2001-0581

Malware in sbrugna...

EUVD-2006-4646

Malware in sbrugna...

EUVD-2018-17281

Malware in sbrugna...

EUVD-2019-7749

Malware in sbrugna...

EUVD-2002-2121

Malware in sbrugna...

EUVD-2015-3412

Malware in sbrugna...

EUVD-2004-0734

Malware in sbrugna...

EUVD-2019-10992

Malware in sbrugna...

EUVD-2018-0549

Malware in sbrugna...

EUVD-2016-2475

Malware in sbrugna...

EUVD-2019-4874

Malware in sbrugna...

CVE-2025-9029: Missing Authorization

The WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder plugin for WordPress is vulnerable to missing authorization via the wdkithandlereviewsubmission function in versions less than, or equal to, 1.2.16. This is due to the plugin not properly verifyin...